Curated security research, vulnerabilities, advisories and tools for practitioners.

#windows

Security coverage tagged windows. (Page 5)

121.

Tokenvator: Release 2

blog | 2018-09-27 00:00 | netspi.com | Original ↗ | .md | #privilege-escalation | #windows | #red-team

122.

Introducing windows-acl: working with ACLs in Rust

blog | 2018-08-23 11:50 | blog.trailofbits.com | Original ↗ | .md | #open-source | #rust | #windows

123.

Operational Guidance for Offensive User DPAPI Abuse

blog | 2018-08-22 07:00 | specterops.io | Original ↗ | .md | #windows | #specterops | #attack

124.

Windows Exploitation Tricks: Exploiting Arbitrary Object Directory Creation for Local Elevation of Privilege

blog | 2018-08-14 00:00 | projectzero.google | Original ↗ | .md | #windows | #exploitation | #project-zero

125.

blog | 2018-07-24 07:00 | specterops.io | Original ↗ | .md | #windows | #tooling | #specterops

126.

Tokenvator: A Tool to Elevate Privilege using Windows Tokens

blog | 2018-06-19 00:00 | netspi.com | Original ↗ | .md | #privilege-escalation | #windows | #red-team

127.

The Tale of SettingContent-ms Files

blog | 2018-06-11 07:00 | specterops.io | Original ↗ | .md | #windows | #code-execution | #specterops

128.

Installing PowerShell on Kali Linux

blog | 2018-06-06 00:00 | kali.org | Original ↗ | .md | #microsoft | #windows | #powershell

129.

Collect NTFS forensic information with osquery

blog | 2018-05-28 16:06 | blog.trailofbits.com | Original ↗ | .md | #incident-response | #windows | #digital-forensics

130.

Attacking Application Specific SQL Server Instances

blog | 2018-05-08 00:00 | netspi.com | Original ↗ | .md | #windows | #penetration-testing | #database-security

131.

Executing .NET Methods with RunDotNetDll32

blog | 2018-04-24 00:00 | netspi.com | Original ↗ | .md | #windows | #red-team | #dotnet

132.

Windows Exploitation Tricks: Exploiting Arbitrary File Writes for Local Elevation of Privilege

blog | 2018-04-18 00:00 | projectzero.google | Original ↗ | .md | #vulnerability-research | #privilege-escalation | #arbitrary-file-write

133.

Windows Events, Sysmon and Elk…oh my! (Part 2)

blog | 2018-03-12 00:00 | netspi.com | Original ↗ | .md | #windows | #blue-team | #logging

134.

Kali Linux in the Windows App Store

blog | 2018-03-05 00:00 | kali.org | Original ↗ | .md | #windows | #kali-linux | #wsl

135.

Attacks Against Windows PXE Boot Images

blog | 2018-02-13 00:00 | netspi.com | Original ↗ | .md | #windows | #lateral-movement | #pxe

136.

Windows Events, Sysmon and Elk…oh my!

blog | 2018-02-06 00:00 | netspi.com | Original ↗ | .md | #windows | #blue-team | #logging

137.

Reverse Engineering the Win32k Type Isolation Mitigation

research | 2018-02-01 23:00 | blog.quarkslab.com | Original ↗ | .md | #windows | #reverse-engineering | #kernel

138.

Kali on the Windows Subsystem for Linux

blog | 2018-01-10 00:00 | kali.org | Original ↗ | .md | #windows | #virtualization | #kali-linux

139.

aPAColypse now: Exploiting Windows 10 in a Local Network with WPAD/PAC and JScript

blog | 2017-12-18 00:00 | projectzero.google | Original ↗ | .md | #rce | #windows | #lateral-movement

140.

Windows DNS Client – Memory Corruption Vulnerabilities

vulnerability | 2017-10-10 00:00 | CVE-2017-11779 | bishopfox.com | Original ↗ | .md | #microsoft | #windows | #memory-corruption

141.

Tracking a stolen code-signing certificate with osquery

blog | 2017-10-10 12:53 | blog.trailofbits.com | Original ↗ | .md | #supply-chain | #incident-response | #malware

142.

Using Binary Diffing to Discover Windows Kernel Memory Disclosure Bugs

blog | 2017-10-05 00:00 | projectzero.google | Original ↗ | .md | #information-disclosure | #windows | #reverse-engineering

143.

Bypassing VirtualBox Process Hardening on Windows

blog | 2017-08-23 00:00 | projectzero.google | Original ↗ | .md | #windows | #virtualbox | #project-zero

144.

Windows Exploitation Tricks: Arbitrary Directory Creation to Arbitrary File Read

blog | 2017-08-08 00:00 | projectzero.google | Original ↗ | .md | #privilege-escalation | #windows | #exploitation

145.

Microsoft didn’t sandbox Windows Defender, so I did

blog | 2017-08-02 10:50 | blog.trailofbits.com | Original ↗ | .md | #vulnerability-research | #rust | #sandboxing

146.

How to get SQL Server Sysadmin Privileges as a Local Admin with PowerUpSQL

blog | 2017-05-23 00:00 | netspi.com | Original ↗ | .md | #privilege-escalation | #windows | #sql-server

147.

Exploiting MS16-145: MS Edge TypedArray.sort Use-After-Free (CVE-2016-7288)

vulnerability | 2017-05-01 22:00 | CVE-2016-7288 | blog.quarkslab.com | Original ↗ | .md | #rce | #use-after-free | #windows

148.

Exploiting .NET Managed DCOM

blog | 2017-04-28 00:00 | projectzero.google | Original ↗ | .md | #windows | #exploitation | #dotnet

149.

Getting Started with WMI Weaponization – Part 5

blog | 2017-04-18 00:00 | netspi.com | Original ↗ | .md | #windows | #powershell | #wmi

150.

Getting Started with WMI Weaponization – Part 3

blog | 2017-04-11 00:00 | netspi.com | Original ↗ | .md | #windows | #wmi | #post-exploitation

← Previous More →