ffffffff0x 团队维护的安全知识框架,内容包括不仅限于 web安全、工控安全、取证、应急、蓝队设施部署、后渗透、Linux安全、各类靶机writup

剑指Offer——名企面试官精讲典型编程题

Total Registry - enhanced Registry editor/viewer

A memory scanning evasion technique

Proofs-of-concept

Enumerating and removing kernel callbacks using signed vulnerable drivers

NTLM relaying for Windows made easy

From an account member of the group Backup Operators to Domain Admin without RDP or WinRM on the Domain Controller

通过反射DLL注入、Win API、C#、以及底层实现NetUserAdd方式实现BypassAV进行增加用户的功能,实现Cobalt Strike插件化

Leaked Windows processes handles identification tool

Bring your own print driver privilege escalation tool

Detect strange memory regions and DLLs

A proof of concept demonstrating instrumentation callbacks on Windows 10 21h1 with a TLS variable to ensure all syscalls are caught.

CVE-2022-25943

This PoC uses two diferent technics for stealing the primary token from all running processes, showing that is possible to impersonate and use whatever token present at any process

Penetration test

CVE-2022-25943