Archives | Yangsir

2021

09

20

Add A Scheduled Task BypassAV（WEBSHELL）

Some of the wordsAfter Windows machine obtains target Webshell in red team task, progress maintains permissions through

2021-09-20 Learning record

14

Add A Scheduled Task BypassAV

Some of the wordsBased on the idea, I developed a small tool for adding scheduled tasks by BYpassav More personal tools

2021-09-14 Learning record

Redteam Bypass ScheduledTask

11

A school infrastructure system vulnerability discovery

Some of the wordsAll cases are authorized legal compliance projects. Do not carry out any penetration attacks without au

2021-09-11 Actual combat record

Redteam Logical Vulnerability Discovery Vulnerability

10

A financial mall vulnerability discovery

Some of the wordsAll cases are authorized legal compliance projects. Do not carry out any penetration attacks without au

2021-09-10 Actual combat record

Logical Vulnerability Discovery Vulnerability

09

ConfluenceRCE【CVE-2021-26084】

IntroductionRemote attacker in authenticated or in certain circumstances without authentication, by constructing a malic

2021-09-09 Simple repetition

Redteam RCE Confluence CVE-2021-26084

07

CVE-2021-1732 Windows Privilege promotion

IntroductionBITTER APT's 0day exploit, used in one of its disclosed attacks, allows ordinary user processes to be gi

2021-09-07 Learning record

Redteam Windows Privilege Promotion LPE CVE-2021-1732

07

MS17010 Common ETERNAL Series Attack

Some of the wordsMaybe talke about the 17010 you just know the ETERNALBLUE? Now I will take more way to attack the ETERN

2021-09-07 Learning record

Redteam Bypass MS17010 ETERNALCHAMPION ETERNALROMANCE ETERNALSYNERGY ETERNALBLUE

07

MS17010 Bypass Attack

Some of the wordsAs we all know how to attack the ms17010, now I will tell you a way to bypass the EDR OR AV, of course

2021-09-07 Learning record

Redteam Bypass MS17010 ETERNALCHAMPION ETERNALROMANCE ETERNALSYNERGY ETERNALBLUE

04

Hashcat Blasting Method

IntroductionHashcat claims to be the world's fastest password recovery tool. It had a proprietary code base until 20

2021-09-04 Tips

Hashcat

02

ADCS&DomainGoldenCertificate

Some of the wordsMost of the time domain set branch of CA and AD authentication system, using the CA certificate issued

2021-09-02 Learning record

Redteam Domain Environment Golden Certificate PTT