Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Exploiting Trusted Hosts in WinRM

netspi.com | blog | #windows | #lateral-movement | #pentest | #misconfiguration | #winrm | #credential-relay

Summary

Examines WinRM misconfigurations—unencrypted channels, Basic auth, permissive TrustedHosts—that let attackers intercept credentials or relay authentication for remote command execution.
Published
Collected

original ↗

Related coverage

blog · netspi.com
5 Ways to Find Systems Running Domain Admin Processes
Details five ways to find systems running Domain Admin processes: checking locally, querying domain controllers for sessions, scanning remote tasks, NetBIOS enumeration, and token spraying.
blog · projectzero.google
aPAColypse now: Exploiting Windows 10 in a Local Network with WPAD/PAC and JScript
A Project Zero write-up showing how a local network attacker can abuse Windows 10 WPAD/PAC proxy files, executed as JavaScript by jscript.dll, to achieve remote code execution.
blog · netspi.com
Stay Ahead of Cloud Threats: Introducing Azure and AWS Security Reviews
Discover how NetSPI's Azure & AWS Configuration Reviews provide continuous visibility, risk identification, and actionable insights to secure your cloud environments.
blog · netspi.com
DEF CON 33: NetSPI’s “Access Everywhere” Experience
NetSPI security experts share key insights from DEF CON 33's "Access Everywhere" theme, from networking with hackers to expanding security expertise through sessions and workshops.
blog · netspi.com
Introducing New Software as a Service (SaaS) Security Assessments
NetSPI launches SaaS Security Assessments for Salesforce and Microsoft 365, pairing automated and manual testing against CIS Benchmarks to uncover misconfigurations in an often-overlooked surface.
blog · netspi.com
Pivoting Clouds in AWS Organizations – Part 1: Leveraging Account Creation, Trusted Access, and Delegated Admin
Part one on pivoting across AWS Organizations: account boundaries, the 'easy win' of attacker-created member accounts, and abuse of trusted access, delegated administration and IAM Access Analyzer.
back