Tag
1 post tagged configuration / information disclosure.
An assumed-breach assessment of WinServ, a Windows Server 2025 file server on LabNet. The department-share RBAC held — but exposed WinRM plus a valid admin credential gave full remote control of the server. 1 Critical, 2 Medium findings.
