Aggregator

胡金鱼

RemoteKrbRelay Remote Kerberos Relay made easy! Advanced Kerberos Relay Framework Details Now, you have four folders in front of you: Checker – old version of the checker for detecting vulnerable DCOM objects; Checkerv2.0 – new version...

The post RemoteKrbRelay: Advanced Kerberos Relay Framework appeared first on Penetration Testing Tools.

PsMapExec A PowerShell tool heavily inspired by the popular tool CrackMapExec / NetExec. PsMapExec aims to bring the function and feel of these tools to PowerShell with its own arsenal of improvements. PsMapExec is...

The post PsMapExec: assess and compromise an Active Directory environment appeared first on Penetration Testing Tools.

小鹏自研智驾芯片成功流片；IBM 关闭中国研发部门，涉及员工数量超过 1000 人；曝滴滴拟出售智能座舱业务。

叙述-高价值Web应用RCE后利用研究

叙述-高价值Web应用RCE后利用研究

叙述-高价值Web应用RCE后利用研究

叙述-高价值Web应用RCE后利用研究

叙述-高价值Web应用RCE后利用研究

叙述-高价值Web应用RCE后利用研究

叙述-高价值Web应用RCE后利用研究

This post describes vulnerability in Microsoft 365 Copilot that allowed the theft of a user’s emails and other personal information. This vulnerability warrants a deep dive, because it combines a variety of novel attack techniques that are not even two years old.

I initially disclosed parts of this exploit to Microsoft in January, and then the full exploit chain in February 2024. A few days ago I got the okay from MSRC to disclose this report.

The quicker a cyberattack is identified, the less it costs. Jon Clay, VP of Threat Intelligence, reviews seven key initial attack vectors and provides proactive security tips to help you reduce cyber risk across the attack surface.

你可能错过的新鲜事国内无线充电新规 9 月 1 日起施行由工信部制定的《无线充电（电力传输）设备无线电管理暂行规定》将在 2024 年 9 月 1 日起正式实施，该规定明确了国内无线充电设备的工作