Lucene search
+L

8342 matches found

CVE
CVE
added 2026/09/07 12:01 p.m.38 views

CVE-2026-76578

FreeIPA is affected by a critical flaw (CVSS 9.8 ) in its self-managed OTP token ACI , which does not require authentication and fails to restrict which attributes may be added alongside a token entry. Combined with a related flaw in the underlying directory server's ACI evaluation (tracked separ...

9.8CVSS0.00453EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2026/09/07 12:01 p.m.4 views

CVE-2026-76578

A flaw was found in FreeIPA. The self-managed OTP token ACI does not require authentication and does not restrict which attributes may be added alongside the token entry. An unauthenticated LDAP client can exploit this, combined with a related flaw in the underlying directory server's ACI...

9.8CVSS0.00453EPSS
SaveExploits0
EUVD
EUVD
added 2026/09/07 12:01 p.m.7 views

EUVD-2026-72356

A flaw was found in FreeIPA. The self-managed OTP token ACI does not require authentication and does not restrict which attributes may be added alongside the token entry. An unauthenticated LDAP client can exploit this, combined with a related flaw in the underlying directory server's ACI...

9.8CVSS0.00453EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/09/07 12:01 p.m.3 views

CVE-2026-76578

A flaw was found in FreeIPA. The self-managed OTP token ACI does not require authentication and does not restrict which attributes may be added alongside the token entry. An unauthenticated LDAP client can exploit this, combined with a related flaw in the underlying directory server's ACI...

9.8CVSS0.00453EPSS
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/06 5:23 p.m.5 views

KrbRelayUp

KrbRelayUp Simple wrapper around some of the features of Rubeus and KrbRelay and a few other honorable mentions in the acknowledgements section in order to streamline the abuse of the following attack primitive: 0. Optional New machine account creation New-MachineAccount 1. Local machine account...

6AI score
SaveExploits0References14
Kitploit
Kitploit
added 2026/09/06 3:17 p.m.4 views

blackhat-usa-2022-demos

blackhat-usa-2022-demos Demos for the Blackhat USA 2022 talk "Taking Kerberos to the Next Level". This is the slides and demos for James Forshaw @tiraniddo and Nick Landers @monoxgas presentation. The demos are as follows: demo1.ps1 - Silver ticket with password. demo2.ps1 - Silver ticket U2U...

7.8CVSS7.7AI score0.11306EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/06 3:15 p.m.5 views

NegoExRelay

Negoexrelayx - Negoex relaying tool Toolkit for abusing Kerberos PKU2U and NegoEx. Requires impacket It is recommended to install impacket from git directly to have the latest version available. negoexrelayx.py This tool allows you to relay NegoEx with PKU2U authentication to other copmuter and...

6.4AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/06 7:21 a.m.9 views

ldeep

============== Project Status .. image:: https://github.com/franc-pentest/ldeep/actions/workflows/python-test.yml/badge.svg :target: https://github.com/franc-pentest/ldeep/actions/workflows/python-test.yml :alt: Build status .. image:: https://badgen.net/pypi/v/ldeep :target:...

5.9AI score
SaveExploits0References6
Kitploit
Kitploit
added 2026/09/06 5:14 a.m.3 views

CVE-2025-59390-

CVE-2025-59390- The attached POC will allow you to crack the Kerberos signiture in Apache Druid and also, any integer created by ThreadLocalRandom Advisory - Apache Druid’s Kerberos authenticator uses a weak fallback secret when the druid.auth.authenticator.kerberos.cookieSignatureSecret...

9.8CVSS5.9AI score0.00611EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/06 4:41 a.m.6 views

ticket_converter

This script is no longer supported Use the impacket example ticketConverter.py. ticketconverter A little tool to convert ccache tickets into kirbi KRB-CRED and vice versa based on impacket. As input you must provide a ccache or kirbi file. The script will detect the format and convert it...

6AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/05 3:55 p.m.5 views

KerberosAudit-PS

This repository does not have a README...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/05 3:34 p.m.5 views

BLACKHAT_USA2022

BLACKHATUSA2022 Just About BLACKHAT USA2022 PDF Public Download in release or this mirror File List, Search what your intersting. root@kitploit: ├── BLACKHATUSA2022 │ ├── Taking Kerberos To The Next Level.pdf │ ├── US-22-ABDELLATIF-Unlimited-Results-Breaking-Firmware-Encryption.pdf │ ├──...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/05 3:32 p.m.8 views

Modules

Modules Modules used by the Havoc Framework. Powerpick Powerpick implementation for the Havoc Framework. InvokeAssembly InvokeAssembly implementation for the Havoc Framework. Template This is the base template for the modules. You can use this to write your own modules for the Havoc Framework...

5.9AI score
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/05 6:16 a.m.8 views

BloodHound.py-Kerberos

What is this fork?! I needed bloodhound with Kerberos support and found this comment. Turns out there was a branch supporting Kerberos auth all along! I took the liberty to merge this branch in to master to get them sweet BloodHound 4.2+ exports. All credit goes to the people who actually wrote t...

5.9AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/05 6:10 a.m.8 views

RITM

RITM This is a Python implementation of the man-in-the-middle attack described by Charlie Clark @exploitph in his post, New Attack Paths? AS Requested Service Tickets, and demonstrated in his proof-of-concept, Roast in the Middle. In short, this tool: 1. Performs ARP spoofing between your targets...

5.9AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/05 5:55 a.m.4 views

WonkaVision

WonkaVision WonkaVision is a proof of concept POC tool to analyze Kerberos tickets and attempt to determine if they are forged. This tool was created by Charlie Clark and Andrew Schwartz. It should be noted that this POC is not intended to be a production-ready enterprise application, but rather ...

6AI score
SaveExploits0References14
Kitploit
Kitploit
added 2026/09/04 9:49 p.m.6 views

wireshark-rdp

Sample RDP Wireshark capture files Here is a collection of RDP decrypted capture files, showing various scenarios. RDP with NLA, Kerberos password authentication 1 rdp-nla-kerberos-auth1.pcapng Username: [email protected] Server: IT-HELP-TEST.ad.it-help.ninja Authentication: RDP NLA with...

5.9AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/04 9:34 p.m.7 views

GetLAPSPassword

GetLAPSPassword A feeble attempt at writing a LAPS dumping tool that supports both NTLM and Kerberos auth using the impacket library. Initial structure of this tool was taken from the impacket example GetADUsers.py https://github.com/fortra/impacket/raw/master/examples/GetADUsers.py and the LDAP...

5.9AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/04 6:42 p.m.5 views

PowershellKerberos

PowershellKerberos Some scripts to abuse kerberos using Powershell. Check how to use video Thanks to @BRIPWN YouTube Injector.ps1 Small tool for injecting kerberos tickets. Supports two work modes: U can read ticket from kirbi file 1 mode U can read ticket from b64 2 mode Examples: root@kitploit:...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/04 6:42 p.m.5 views

GIUDA

GIUDA GET a TGS on behalf of another user without password Scenario: you are Local Administrator and there is a logged User you want to Impersonate! Chain: SeTcbPrivilege allows you to read LSA storage, extract the SESSION KEY from TGT, and forge a request asking for a TGS; You must use LUID...

5.9AI score
SaveExploits0
Rows per page
Query Builder