Re:=?utf-8?q?_NEW=3A?= security/evil-winrm

Hi,

resending, reattached for ease of review.

Sebastian
Am Dienstag, März 23, 2021 11:28 CET, schrieb "Sebastian Reitenbach" <sebastia@l00-bugdead-prods.de>:

> Am Donnerstag, März 18, 2021 22:52 CET, schrieb "Sebastian Reitenbach" <sebastia@l00-bugdead-prods.de>:
>
> > Hi,
> >
> > Am Dienstag, März 16, 2021 22:33 CET, schrieb "Sebastian Reitenbach" <sebastia@l00-bugdead-prods.de>:
> >
> > > Hi,
> > >
> > > cat DESCR:
> > > WinRM (Windows Remote Management) is the Microsoft implementation of
> > > WS-Management Protocol. A standard SOAP based protocol that allows
> > > hardware and operating systems from different vendors to interoperate.
> > > Microsoft included it in their Operating Systems in order to make life
> > > easier to system administrators.
> > >
> > > This program can be used on any Microsoft Windows Servers with this> > feature enabled (usually at port 5985), of course only if you have
> > > credentials and permissions to use it. So we can say that it could be> used in a post-exploitation hacking/pentesting phase. The purpose of
> > > this program is to provide nice and easy-to-use features for hacking. It
> > > can be used with legitimate purposes by system administrators as well> but the most of its features are focused on hacking/pentesting stuff.>
> > > this needs all the other gems just sent as dependency.
> >
> > as jeremy@ pointed out, stringio is in Ruby itself, and indeed not needed.
> > Updated package without stringio dependency attached.
> >
> this time really attached.
>
> > >
> > > OK to import?
> > this question still holds.
> >
> > cheers,
> > Sebastian
> >