PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Implementing Impacket's Newest Protocol: MS-RAA

abdulmhsblog.com | blog | #pentesting | #active-directory | #windows | #red-team | #tooling | #rpc | #impacket | #ms-raa
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

A walkthrough of implementing MS-RAA (Remote Authorization) as a new Impacket module, covering how the RPC protocol simulates access control decisions to answer what a principal can actually access.
Published
Collected

Related coverage

blog · specterops.io
GhostPack
# GhostPack Author Will Schroeder Read Time 15 mins Published Jul 24, 2018 ##### Share * GhostPack * Seatbelt * SharpUp * SharpRoast * SharpDump * SafetyKatz * SharpWMI * Wrapup Put Insights Into...
blog · specterops.io
The PowerView PowerUsage Series #5
# The PowerView PowerUsage Series #5 Author Will Schroeder Read Time 3 mins Published Jul 17, 2018 ##### Share * The Scenario * The Solution * The Explanation Put Insights Into Action * Explore...
Critical · vulnerability · github.com
php2shell-zeros: Unpatched 0-Day RCE Flaws and Weaponized Exploit Chains in PHP and NativePHP
These surviving flaws bypass earlier patches and demonstrate that core PHP deserialization and memory management remain fundamentally fragile, posing critical unauthenticated RCE risks to WordPress and production PHP services.
tool · github.com
IUM-Debugger: Patching Secure Kernel to Enable Debugging of VTL 1 Isolated User Mode Trustlets
Overcomes signature-enforced boot protections on securekernel.exe to unlock dynamic live debugging of Windows VBS trustlets (e.g., Credential Guard), greatly simplifying reverse engineering and vulnerability research against isolated secure enclaves.
research · eshard.com
Retrieve the drive letter from a device name on Windows
# Parse the arguments given to our script parser = argparse.ArgumentParser() parser.add_argument( "--host", type=str, default="localhost", help='Reven host, as a string (default: "localhost")', )...
blog · abdulmhsblog.com
Dissecting Impacket for Good and Bad
Rewriting Impacket internally led the author to publish Impacket-IoCs, 72+ protocol-level detection indicators, after finding most public detections rely on easily changed service names and artifacts.
Back