Cyber Security Research Blogs

Here is a beginner-friendly Windows privilege escalation methodology. This guide assumes you are starting with a very limited shell like a web shell, Netcat reverseContinue readingBeginner Friendly Step-by-Step Methodology for Windows Privilege Escalation

Common Vulnerabilities and Exposure MS08-067 (NetAPI) Check the vulnerability with the following nmap script. nmap -Pn -p445 –open –max-hostgroup 3 –script smb-vuln-ms08-067 <ip_netblock> Metasploit modules to exploit MS08-067 NetAPI.Continue readingWindows Kernel Exploitation – part 4 | Vulnerabilities

EoP – Kernel Exploitation List of exploits kernel : https://github.com/SecWiki/windows-kernel-exploits #Security Bulletin   #KB     #Description    #Operating System MS17-017 　[KB4013081]　　[GDI Palette Objects Local Privilege Escalation]　　(windows 7/8) CVE-2017-8464 　[LNK Remote Code Execution Vulnerability]　　(windowsContinue readingWindows privilege escalation – part 3 | Kernal-Exploits

Windows Version and Configuration systeminfo | findstr /B /C:”OS Name” /C:”OS Version” Extract patchs and updates wmic qfe Architecture wmic os get osarchitecture || echoContinue readingWindows Privilege escalation – Part 2 | Enumeration

Tools : – Here is a list of most comman tools that are used by various pentester to enumrate and exploit the windows vulnerabilites .Continue readingWindows Privilege Escalation Guide – part 1 | Tools