Archives: 2021 | Yangsir

2021

09

07

Some of the wordsMaybe talke about the 17010 you just know the ETERNALBLUE? Now I will take more way to attack the ETERN

2021-09-07 Learning record

Redteam Bypass MS17010 ETERNALCHAMPION ETERNALROMANCE ETERNALSYNERGY ETERNALBLUE

07

MS17010 Bypass Attack

Some of the wordsAs we all know how to attack the ms17010, now I will tell you a way to bypass the EDR OR AV, of course

2021-09-07 Learning record

Redteam Bypass MS17010 ETERNALCHAMPION ETERNALROMANCE ETERNALSYNERGY ETERNALBLUE

04

Hashcat Blasting Method

IntroductionHashcat claims to be the world's fastest password recovery tool. It had a proprietary code base until 20

2021-09-04 Tips

Hashcat

02

ADCS&DomainGoldenCertificate

Some of the wordsMost of the time domain set branch of CA and AD authentication system, using the CA certificate issued

2021-09-02 Learning record

Redteam Domain Environment Golden Certificate PTT

01

ADCS&ESC2-7Attack

前言关于最基本的一些知识点、ESC1、ESC8的攻击方式，请看我先前写的文章 https://yangsirrr.github.io/2021/08/16/adcs-esc1-es

2021-09-01 Learning record

Redteam Domain Environment PTT DPE ADCS ESC2 ESC3 ESC4 ESC5 ESC6 ESC7

08

29

Discovery of multiple logic vulnerabilities in a project

Some of the wordsAll cases are authorized legal compliance projects. Do not carry out any penetration attacks without au

2021-08-29 Actual combat record

Logical Vulnerability Discovery Vulnerability

29

How to download remote target file

Some of the wordsPlease be sure to obey the law. Don't download what you shouldn't download, watch what you shouldn't re

2021-08-29 Tips

Bypass Download file

29

A few command exec bypass tips

Some of the wordsWhen executing commands against Linux targets, I found that some commands were somewhat limited, so I r

2021-08-29 Tips

Redteam Command execution Bypass

20

CVE-2021-1675 Windows Privilege Promotion

IntroductionThis vulnerability level belongs to one of the powerful tools for domain opening slightly inferior to zerolo

2021-08-20 Learning record

Redteam Windows Privilege Promotion LPE CVE-2021-1675 Mimikatz RCE

17

CVE-2021-36934 Windows Privilege Promotion

IntroductionA privilege promotion vulnerability exists because access control lists (ACLs) are too loose on multiple sys

2021-08-17 Learning record

Redteam Windows Privilege Promotion LPE Mimikatz CVE-2021-36934