LDAPFragger: Bypassing network restrictions using LDAP attributes - to control workstations in two isolated segments remotely with Cobalt Strike, we built a tool that uses the shared Active Directory component to build a communication channel. Security News & Discussion

---

• LDAPFragger: Bypassing network restrictions using LDAP attributes - to control workstations in two isolated segments remotely with Cobalt Strike, we built a tool that uses the shared Active Directory component to build a communication channel.
• nginx memory disclosure via null byte
• New PoC for KR00K vulnerability

LDAPFragger: Bypassing network restrictions using LDAP attributes - to control workstations in two isolated segments remotely with Cobalt Strike, we built a tool that uses the shared Active Directory component to build a communication channel. Posted: 19 Mar 2020 03:23 AM PDT submitted by /u/digicat [link] [comments]

nginx memory disclosure via null byte Posted: 19 Mar 2020 05:07 AM PDT submitted by /u/albinowax [link] [comments]

New PoC for KR00K vulnerability Posted: 18 Mar 2020 11:37 AM PDT It seems an interesting PoC script https://github.com/akabe1/kr00ker to exploit the vulnerability CVE-2019-15126 aka KR00K. submitted by /u/turk85kashim [link] [comments]

You are subscribed to email updates from /r/netsec - Information Security News & Discussion. To stop receiving these emails, you may unsubscribe now.	Email delivery powered by Google
Google, 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States