User contributions for Lphanvan

17 December 2017

• 22:5422:54, 17 December 2017 diff hist +14,484 N AD Powershell Created page with "Welcome to the Learn-Power-Shell wiki! # Learn-Power-Shell Power shell tips collected by Ender Phan # Some useful links: - https://blog.windowsnt.lv/2011/11/15/tracking-user-..." current
• 22:4322:43, 17 December 2017 diff hist −6 NSA - MS17-010 →Executing the FuzzBunch current
• 22:4322:43, 17 December 2017 diff hist +35 NSA - MS17-010 No edit summary

3 May 2017

• 13:0613:06, 3 May 2017 diff hist +12 Category:I805 Authentication and Authorization →RED TEAM current
• 13:0513:05, 3 May 2017 diff hist +117 Category:I805 Authentication and Authorization →Passing the course

2 May 2017

• 23:5523:55, 2 May 2017 diff hist +43 NSA - MS17-010 →Microsoft Security Bulletin MS17-010 - NSA Tool leak
• 22:1022:10, 2 May 2017 diff hist +550 NSA - MS17-010 →Why Eternalblue & DoublePulsar?
• 21:4221:42, 2 May 2017 diff hist −223 CVE-2017-0199 Malicious RTF Document →Step 1 current
• 21:4121:41, 2 May 2017 diff hist +13 CVE-2017-0199 Malicious RTF Document →Step 6
• 21:4121:41, 2 May 2017 diff hist −6 CVE-2017-0199 Malicious RTF Document →Step 6
• 21:4021:40, 2 May 2017 diff hist +351 CVE-2017-0199 Malicious RTF Document →Step 6
• 21:3921:39, 2 May 2017 diff hist 0 File:5.png Lphanvan uploaded a new version of File:5.png current
• 21:3821:38, 2 May 2017 diff hist +560 CVE-2017-0199 Malicious RTF Document →Step 5
• 21:3821:38, 2 May 2017 diff hist −561 CVE-2017-0199 Malicious RTF Document →Step 4
• 21:3821:38, 2 May 2017 diff hist +1 CVE-2017-0199 Malicious RTF Document →Step 5
• 21:3721:37, 2 May 2017 diff hist +696 CVE-2017-0199 Malicious RTF Document →Step 4
• 21:3621:36, 2 May 2017 diff hist +131 CVE-2017-0199 Malicious RTF Document →Step 4
• 21:3621:36, 2 May 2017 diff hist 0 N File:Capture1-wiki.PNG No edit summary current
• 21:3421:34, 2 May 2017 diff hist +371 CVE-2017-0199 Malicious RTF Document →Step 3
• 21:3321:33, 2 May 2017 diff hist +296 CVE-2017-0199 Malicious RTF Document →Step 3
• 21:3321:33, 2 May 2017 diff hist +159 CVE-2017-0199 Malicious RTF Document →Step 2
• 21:3321:33, 2 May 2017 diff hist +1,256 N CVE-2017-0199 Malicious RTF Document Created page with "==CVE-2017-0199 Malicious RTF Document== ===Step 1 === Prepare an HTA file: (HTA file are HTML application which can run JScript and VBscript) Let's call it "ms.hta" <pre> <..."

30 April 2017

• 20:1120:11, 30 April 2017 diff hist +1 NSA - MS17-010 →Microsoft Security Bulletin MS17-010 - NSA Tool leak
• 20:1020:10, 30 April 2017 diff hist +40 NSA - MS17-010 →Microsoft Security Bulletin MS17-010 - NSA Tool leak
• 20:1020:10, 30 April 2017 diff hist +24 NSA - MS17-010 →Introduction
• 20:0920:09, 30 April 2017 diff hist +20 NSA - MS17-010 →Introduction
• 20:0920:09, 30 April 2017 diff hist +92 NSA - MS17-010 →Summary
• 20:0920:09, 30 April 2017 diff hist 0 N File:Capture17.PNG No edit summary current
• 20:0720:07, 30 April 2017 diff hist +149 NSA - MS17-010 →Getting Empire session
• 20:0720:07, 30 April 2017 diff hist +6 NSA - MS17-010 →Getting Empire session
• 20:0720:07, 30 April 2017 diff hist +14 NSA - MS17-010 →Getting Empire session
• 20:0620:06, 30 April 2017 diff hist +46 NSA - MS17-010 →Creating listener and malicious DLL with Empire
• 20:0620:06, 30 April 2017 diff hist 0 N File:Capture16.PNG No edit summary current
• 20:0620:06, 30 April 2017 diff hist 0 N File:Capture15.PNG No edit summary current
• 20:0520:05, 30 April 2017 diff hist +56 NSA - MS17-010 →Injecting the malicious DLL via DoublePulsar
• 20:0420:04, 30 April 2017 diff hist +644 NSA - MS17-010 →Injecting the malicious DLL via DoublePulsar
• 20:0420:04, 30 April 2017 diff hist 0 N File:Capture14.PNG No edit summary current
• 20:0320:03, 30 April 2017 diff hist 0 N File:Capture13.PNG No edit summary current
• 20:0220:02, 30 April 2017 diff hist +127 NSA - MS17-010 →Injecting the malicious DLL via DoublePulsar
• 20:0220:02, 30 April 2017 diff hist 0 N File:Capture12.PNG No edit summary current
• 20:0220:02, 30 April 2017 diff hist +134 NSA - MS17-010 →Injecting the malicious DLL via DoublePulsar
• 20:0220:02, 30 April 2017 diff hist 0 N File:Capture11.PNG No edit summary current
• 19:5719:57, 30 April 2017 diff hist +206 NSA - MS17-010 →Generating malicious DLL by using Empire
• 19:5619:56, 30 April 2017 diff hist +579 NSA - MS17-010 →Generating malicious DLL by using Empire
• 19:5619:56, 30 April 2017 diff hist 0 N File:Capture10.PNG No edit summary current
• 19:5619:56, 30 April 2017 diff hist 0 File:Capture9.PNG Lphanvan uploaded a new version of File:Capture9.PNG current
• 19:5619:56, 30 April 2017 diff hist 0 N File:Capture9.PNG No edit summary
• 19:5319:53, 30 April 2017 diff hist +22 NSA - MS17-010 →Using ETERNALBLUE.
• 19:5319:53, 30 April 2017 diff hist +83 NSA - MS17-010 →Using EternalBlue framework
• 19:5219:52, 30 April 2017 diff hist +105 NSA - MS17-010 →Using EternalBlue framework