module

Windows Net-NTLMv2 Reflection DCOM/RPC (Juicy)

Disclosed
Jan 16, 2016

Description

This module utilizes the Net-NTLMv2 reflection between DCOM/RPC
to achieve a SYSTEM handle for elevation of privilege.
It requires a CLSID string.
Windows 10 after version 1803, (April 2018 update, build 17134) and all
versions of Windows Server 2019 are not vulnerable.
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.