Bypassing Windows Password Policies for Remote Desktop Connection in Penetration Testing
During Windows privilege escalation, the `secedit` command can bypass password policies, enabling Remote Desktop Connection with a new admin account.
Category: Network security
Apache CouchDB: Features, Real-World Applications, and CVE-2017-12635 Vulnerability Explained
Apache CouchDB is a NoSQL database using JSON, JavaScript, and HTTP. CVE-2017-12635 allows privilege escalation by creating admin accounts.
DNS Zone Transfer Vulnerability: Exploitation, Tools, and Prevention Guide
The DNS zone transfer vulnerability allows attackers to exploit misconfigured DNS servers to retrieve zone data, exposing domain records and network topology.
Critical MariaDB Bug: memcmp Vulnerability Enables Brute-Force SQL Database Access
A MariaDB bug allows brute-forcing passwords due to improper `memcmp()` handling, affecting versions up to 5.5.22, with PoC exploits easily implemented.
How to Bypass Campus Network Authentication: A Step-by-Step Guide to Free Internet Access
A method to bypass campus network authentication using SoftEther VPN involves leveraging ports like 53/67/68 and a cloud server. CDTU has patched this…
Mastering Web Shell Exploitation: From Initial Access to Full Server Control
The article details how to move from obtaining a web shell to gaining full server control during penetration testing, emphasizing custom scripts over…
Understanding Python Deserialization Vulnerabilities: A Deep Dive into Pickle Exploits
Python deserialization, often using the `pickle` module, poses security risks. Exploits leverage `__reduce__` for code execution, as seen in Vulhub examples.
Spring Security OAuth RCE Vulnerability: Exploiting SpEL Injection for Remote Code Execution
Spring Security OAuth has an RCE vulnerability via SpEL injection in whitelabel error views, allowing remote command execution if authorized.
Rsync Security Risks: Exploiting Misconfigurations and How to Fix Vulnerabilities
Rsync is a Linux backup tool using port 873 by default. Misconfigurations, like lack of ACLs or authentication, can lead to unauthorized file…
Apache HTTP Server Vulnerability: Bypassing Security with PHP File Parsing Exploit
Apache HTTPD, an HTTP server, has a parsing vulnerability in versions 2.4.0-2.4.29, allowing PHP file uploads with `\x0A` to bypass security checks.
Load More