Grant Willcox – Noise https://noise.getoto.net The collective thoughts of the interwebz Wed, 07 Jun 2023 18:09:30 +0000 en-US hourly 1 https://wordpress.org/?v=6.8.2 Metasploit Weekly Wrap-Up https://noise.getoto.net/2023/06/07/metasploit-weekly-wrap-up-59/ Wed, 07 Jun 2023 18:09:30 +0000 http://noise.getoto.net/?guid=68e8cd79b506ec7ef6a1fc26efd0d4a1 Metasploit Weekly Wrap-Up https://noise.getoto.net/2023/03/17/metasploit-weekly-wrap-up-49/ Fri, 17 Mar 2023 19:33:24 +0000 http://noise.getoto.net/?guid=db6b41d530934724f19e6f3bc63f0e73

FortiNAC EITW Content Added

Whilst we did have a few cool new modules added this week, one particularly interesting one was a Fortinet FortiNAC vulnerability, CVE-2022-39952, that was added in by team member Jack Heysel. This module exploits an unauthenticated RCE in Fortinet FortiNAC versions 9.4.0, 9.2.

]]> Metasploit Weekly Wrap-Up https://noise.getoto.net/2022/10/07/metasploit-weekly-wrap-up-32/ Fri, 07 Oct 2022 19:07:40 +0000 http://noise.getoto.net/?guid=1cce55077c920e52db00be3958a20768

Bofloader - Windows Meterpreter Gets Beacon Object File Loader Support

This week brings a new and frequently requested feature to the Windows Meterpreter, the Beacon Object File loader. This new extension, bofloader, allows for users to execute Beacon Object Files as written for either Cobalt Strike or Sliver. This extension

]]> Metasploit Weekly Wrap-Up https://noise.getoto.net/2022/07/15/metasploit-weekly-wrap-up-22/ Fri, 15 Jul 2022 16:00:55 +0000 http://noise.getoto.net/?guid=ee89d5141eeb4cca4b7d2e14542acd61

JBOSS EAP/AS - More Deserializations? Indeed!

Community contributor Heyder Andrade added in a new module for a Java deserialization vulnerability in JBOSS EAP/AS Remoting Unified Invoker interface for versions 6.1.0 and prior. As far as we can tell this was first disclosed by Joao Matos in

]]> Metasploit Weekly Wrap-Up https://noise.getoto.net/2022/07/01/metasploit-weekly-wrap-up-20/ Fri, 01 Jul 2022 18:44:47 +0000 http://noise.getoto.net/?guid=4e905ecc65c55ab81ab6dbb5684a6182

SAMR Auxiliary Module

A new SAMR auxiliary module has been added that allows users to add, lookup, and delete computer accounts from an AD domain. This should be useful for pentesters on engagements who need to create an AD account to gain an initial foothold into the domain for lateral

]]> Metasploit Weekly Wrap-Up https://noise.getoto.net/2022/06/17/metasploit-weekly-wrap-up-18/ Fri, 17 Jun 2022 17:35:47 +0000 http://noise.getoto.net/?guid=9ae26cbdfa959264a462bf66c05218cd

vCenter Secret Extracter

Expanding on the work of the vcenter_forge_saml_token auxiliary module, community contributor npm-cesium137-io has added a new module for extracting the vmdir/vmafd certificates, the IdP keypair, the VMCA root cert, and anything from vmafd that has a private key associated, from an offline copy

]]> Metasploit Wrap-Up https://noise.getoto.net/2022/02/04/metasploit-wrap-up-39/ Fri, 04 Feb 2022 19:54:30 +0000 http://noise.getoto.net/?guid=5fafd77922a3f5692897368f7b16295c Metasploit Wrap-Up https://noise.getoto.net/2021/10/29/metasploit-wrap-up-30/ Fri, 29 Oct 2021 17:59:46 +0000 http://noise.getoto.net/?guid=8c1a6caf7b07cd1a38a8d65351756a2f Metasploit Wrap-Up https://noise.getoto.net/2021/07/23/metasploit-wrap-up-16/ Fri, 23 Jul 2021 19:39:14 +0000 http://noise.getoto.net/?guid=5d64ef678f668492563d94414e31c3d2

Now I Control Your Resource Planning Servers

Sage X3 is a resource planning product designed by Sage Group which is designed to help established businesses plan out their business operations. But what if you wanted to do more than just manage resources? What if you wanted to hijack the resource

]]> Metasploit Wrap-Up https://noise.getoto.net/2020/12/18/metasploit-wrap-up/ Fri, 18 Dec 2020 19:15:21 +0000 http://noise.getoto.net/?guid=6a5e310e8df2696b1d6b7397a375f6ee