fxb6476

[Vulnerability Description]
 - Hydra through 0.1.8 has a NULL pointer dereference and daemon crash when processing POST requests 
   that lack a 'Content-Length' header. The issue comes from the process_header_end() function, which 
   calls boa_atoi(), which ultimately calls aoti() on a null pointer.
   
   
[Additional Information]
 - The Hydra web server is widely used by embedded networking equipment, such as switches, and embedded devices in general. 
   Because of this fact, it is very difficult to specify device models or vendors that may be impacted by this vulnerability.
   Rudimentary scans using Shodan show over 8,000 devices registered broadcasting the "Hydra v0.1.8" server, open to the 

lesnuages

FROM mcr.microsoft.com/vscode/devcontainers/go:1.16

ENV PROTOC_VER 3.11.4
ENV PROTOC_GEN_GO_VER 1.3.5

# Base packages
RUN apt-get update --fix-missing && apt-get -y install \
  git build-essential zlib1g zlib1g-dev \
  libxml2 libxml2-dev libxslt-dev locate curl \
  libreadline6-dev libcurl4-openssl-dev git-core \

rllola

# Clone the repo
git clone git@github.com:dogecoin/dogecoin.git

# Pick the correct branch/version
cd dogecoin
git checkout 1.14-branding

# Install dependencies
sudo apt install build-essential libtool autotools-dev autoconf pkg-config libssl-dev

Marshall-Hallenbeck

#!/bin/bash

echo "Stopping sliver service (if it exists)"
sudo service sliver-server stop 2>/dev/null
echo "Removing old files (if they exist)"
[ ! -e file ] || rm sliver-client_linux.zip sliver-server_linux.zip
[ ! -e file ] || rm sliver-client sliver-server
echo "Downloading latest sliver linux releases"
wget -q "https://github.com/BishopFox/sliver/releases/latest/download/sliver-client_linux.zip"
wget -q "https://github.com/BishopFox/sliver/releases/latest/download/sliver-server_linux.zip"

steelcm

PS C:\> netstat -an | select-string -pattern "listening"

  TCP    0.0.0.0:80             0.0.0.0:0              LISTENING
  TCP    0.0.0.0:81             0.0.0.0:0              LISTENING
  TCP    0.0.0.0:135            0.0.0.0:0              LISTENING
  TCP    0.0.0.0:383            0.0.0.0:0              LISTENING

Marshall-Hallenbeck

[framework/core]
PROMPT=%whi[%T] %red(%L) %yel%J %grn%S%whi
TimestampOutput=true
ConsoleLogging=true
SessionLogging=true

[framework/features]

[framework/ui/console]

Marshall-Hallenbeck

#!/bin/bash

FILE=/etc/systemd/system/sliver-server.service
if [ ! -f "$FILE" ];then
    sudo echo "[Unit]
Description=Sliver Server

[Service]
Type=simple
ExecStart=/usr/local/bin/sliver-server" > $FILE

vestjoe

Windows 10 Disable Virus and Threat Protections

:: Turn Off Windows Defender
REG ADD "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender" /v DisableAntiSpyware /t REG_DWORD /d 1 /f
REG ADD "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender" /v DisableRoutinelyTakingAction /t REG_DWORD /d 1 /f
REG ADD "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection" /v DisableBehaviorMonitoring /t REG_DWORD /d 1 /f
REG ADD "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection" /v DisableRealtimeMonitoring /t REG_DWORD /d 1 /f

:: Cloud-protection level

Flangvik

PKI Abuse

Some golden links when you are having issues: https://social.technet.microsoft.com/Forums/windows/en-US/96016a13-9062-4842-b534-203d2f400cae/ca-certificate-request-error-quotdenied-by-policy-module-0x80094800quot-windows-server-2008?forum=winserversecurity

Enumerating ADCS On Linux

Download and install Certi

rasta-mouse

using System;
using System.Diagnostics;
using System.Runtime.InteropServices;

namespace BlockDllTest
{
    class Program
    {
        static void Main(string[] args)
        {