As usual, video link: https://video.twimg.com/tweet_video/EOZABJmW4AIjpHp.mp4 …
Prikaži ovu nit
That epic Microsoft moment
#cve20200601 #curveball
Recently worked on #mimikatz and ECC, so yes, 10 and 2016/2019 only.
Previous versions like Windows 7 did not support personnal EC curves (only few NIST standard ones)pic.twitter.com/EayEuFVv1J
-
-
Hvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi
-
-
-
Hey, do you mind uploading to VirusTotal and sharing link? So we can see if it gets tagged for CVE automatically
- Još 8 drugih odgovora
Novi razgovor -
-
-
Which tool did you use to
#curveball "sign" the binary? -
I'm OOO working without lab, so I used https://github.com/develar/osslsigncode … on local WSL. Didn't want to use signtool 'cause 0/system is patched 1/did not want to use CAPI (~sure it will use the real MS one in the chain to embed/verify) 2/certificate was created with..https://github.com/chris2511/xca/
Kraj razgovora
Novi razgovor -
-
-
Does this problem exist on Mac OS X as well? Shall we remove all microsoft software from the macs?
-
Please tell me you re a troll account
Kraj razgovora
Novi razgovor -
-
-
Ok, I already saw other POCs, but this definitely turns
#cve20200601 into real fun.Hvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi
-
-
-
Oh. That was fast
Hvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi
-
-
-
I wonder what's the detection rate on VT after that?
-
I see what you did there
Kraj razgovora
Novi razgovor -
Čini se da učitavanje traje već neko vrijeme.
Twitter je možda preopterećen ili ima kratkotrajnih poteškoća u radu. Pokušajte ponovno ili potražite dodatne informacije u odjeljku Status Twittera.