Blog

Writer Thread - Python

A common problem when we use threads on python is the concurrency of instances on I/O objects or print screen cases, in this case, I show a thread in parallel, to write outputs from other threads instances to a file, sharing a variable called "work_queue", in this code is a list data type, but you can use others like queues from Queue library, using a flag to break the writer thread and give it a last chance to get into While sentence and check for last time the "work_queue" list.

Unauthorized File Download (Attached files) - TestLink (1.16 <= 1.19)

What is TestLink?

Is a web-based test management system that facilitates software quality assurance. It is developed and maintained by Teamtest. The platform offers support for test cases, test suites, test plans, test projects and user management, as well as various reports and statistics.

(Des)Implementacion AES GCM + RSA OAEP - Hybrid Encryption - Python

Caso:
me encontre con la siguiente implementacion en un sitio web Cifrado carga útil AES-GCM - NodeJs  

Las preguntas fueron:

(Impacket) LiExec.py - bypass PTH/SMBexec/PSexec/WMIexec detection

Requisitos:

  1. python3.5 o posterior
  2. Impacket en su ultima version de github (Impacket)
  3. Algunas credenciales (?)
  4. LiExec (Gitlab)

Bypass? de que? como?:

Bueno no lo considero un bypass como tal, pero se puede considerar asi por las protecciones de ciertos ERD, AV o EP,
que al momento de realizar las ejecuciones es posible crear variaciones en rutas, service name, comando a ejecutar y obtencion del output; y asi saltar la proteccion de los agentes

Erase Windows Audit logs

Como borrar los logs de auditoria de windows easy mode?

auditlog