Diego Capriotti
@naksyn • 1,091 subscribers
Network boogeyman
Videos
This has been one of my favorites for a while, but now it's time to let it go. Here's my preferred way of getting the KeePass db that we often hunt for: downgrade the executable to version 2.53, use CVE-2023-24055 and wait for the busy admin to trigger the dump of the database. The target can remain clean and you can simply check for the dump creation. KeePass version 2.53 can still open kdbx created with the version 2.57 and if using a proper xml the user will likely notice nothing. Update alerts can also be disabled within the xml.
Diego Capriotti18,567 Aufrufe • vor 1 Jahr
Here's a new project and some Pyramid features: Embedder lets you create small (go | nim | C# | C++) executables that load Python interpreter to execute Python code using the embedding functionality. Embedder can be easily paired with Pyramid that now has a more OPSEC Pythonmemorymodule with full-in-memory import and all the download chain using Wininet API to reduce the imports to the minimum and smile to those pesky NTLM proxies along the way. Pyramid updates are on the dev branch, plan merging to main soon. Here's a video that shows a 13 kB C# embedder assembly bootstrapping Pyramid to execute mimikatz. Who needs python.exe when you can bring Python to the world? 🌍
Diego Capriotti10,797 Aufrufe • vor 2 Jahren
Keine weiteren Inhalte verfügbar