Infosec.Pub
  • Communities
  • Create Post
  • Create Community
  • heart
    Support Lemmy
  • search
    Search
  • Login
  • Sign Up
digicatM to blueteamsecEnglish · 6 months ago

HKLM\SYSTEM\Setup\sMarTdEpLoY -  The (Static) Keys to Abusing PDQ SmartDeploy

specterops.io

external-link
message-square
1
link
fedilink
2
external-link

HKLM\SYSTEM\Setup\sMarTdEpLoY -  The (Static) Keys to Abusing PDQ SmartDeploy

specterops.io

digicatM to blueteamsecEnglish · 6 months ago
message-square
1
link
fedilink
HKLM\SYSTEM\Setup\sMarTdEpLoY -  The (Static) Keys to Abusing PDQ SmartDeploy - SpecterOps
specterops.io
external-link
TL;DR: Prior to version 3.0.2046, PDQ SmartDeploy used static, hardcoded, and universal encryption keys for secure credential storage. Low-privileged users may recover and decrypt privileged credentials, such as Local Administrator or Active Directory domain-joined accounts, from the registry of managed devices or from operating system (OS) deployment files stored on deployment servers. Introduction PDQ SmartDeploy […]
alert-triangle
You must log in or # to comment.
  • digicatOPM
    link
    fedilink
    English
    arrow-up
    1
    ·
    6 months ago

    https://github.com/garrettfoster13/NotSoSmartDeploy

blueteamsec

blueteamsec

Subscribe from Remote Instance

Create a post
You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !blueteamsec@infosec.pub

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

Visibility: Public
globe

This community can be federated to other instances and be posted/commented in by their users.

  • 40 users / day
  • 110 users / week
  • 300 users / month
  • 929 users / 6 months
  • 224 local subscribers
  • 627 subscribers
  • 2.39K Posts
  • 183 Comments
  • Modlog
  • mods:
  • digicat
  • BE: 0.19.13
  • Modlog
  • Instances
  • Docs
  • Code
  • join-lemmy.org