PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Quarks PwDump

blog.quarkslab.com | research | #windows | #ntlm | #tooling | #pentest | #password-dumping | #bitlocker
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Quarks PwDump: a Win32 tool dumping local and domain NT/LM hashes, cached domain credentials and NTDS.dit's BitLocker recovery data via JET/ESE APIs to avoid libesedb crashes; admin rights needed.
Published
Collected

Related coverage

research · eshard.com
Retrieve the drive letter from a device name on Windows
# Parse the arguments given to our script parser = argparse.ArgumentParser() parser.add_argument( "--host", type=str, default="localhost", help='Reven host, as a string (default: "localhost")', )...
blog · netspi.com
Gaining AWS Console Access via API Keys
Converts compromised AWS API keys, whether permanent AKIA or temporary ASIA credentials, into browser console access via the federation endpoint, easing recon compared with wrangling CLI syntax.
blog · specterops.io
GhostPack
# GhostPack Author Will Schroeder Read Time 15 mins Published Jul 24, 2018 ##### Share * GhostPack * Seatbelt * SharpUp * SharpRoast * SharpDump * SafetyKatz * SharpWMI * Wrapup Put Insights Into...
blog · netspi.com
Executing SMB Relay Attacks via SQL Server using Metasploit
Explains triggering SMB relay attacks through SQL Server functions like xp_dirtree, then using new Metasploit modules to capture, crack, or relay hashes; SMB signing is the main defense.
research · projectblack.io
Password Strength Checkers - Mostly Useless...
Four of the top 10 password strength checkers give misleading advice: a password rated as needing millions of years to crack fell in 8 seconds on one RTX 3070 against NTLM. Calls for better guidance.
research · slcyber.io
How practical is 100k requests per second? Introducing h3fuzz
Can HTTP/3 really give you 100k requests per second for content discovery? We tested it in a fork of ffuf and are releasing h3fuzz, a web UI for fuzzing.
Back