118 matches found
whiskeysamlandfriends
WhiskeySAML 及其相关工具 TicketsPlease TicketsPlease: Python 库，用于协助生成 Kerberos 票据、远程获取 ADFS 配置设置、生成 Golden SAML 令牌以及获取 Azure 访问令牌。 WhiskeySAML WhiskeySAML: 用于远程 ADFS 配置提取的 Golden SAML 攻击概念验证工具。该工具利用了 TicketsPlease 库。 ShockNAwe ShockNAwe: 概念验证工具，用于生成 Golden SAML 令牌，该令牌将用于向 Azure 核心管理请求访问令牌，随后用于枚举和攻击 Azu...
adfsbrute
adfsbrute 一个用于针对 Active Directory 联合身份验证服务 ADFS 测试凭据的脚本，可自动计算组织的 ADFS URL，并支持密码喷洒或暴力破解攻击。 主要思路是：在每次测试之间加入随机且较长的时间延迟，并使用代理列表或 Tor 来增加蓝队检测难度，从而实施密码喷洒攻击。同时也支持暴力破解，或测试 用户名:密码 格式的凭据（例如来自 Pwndb 的数据）。已测试过的登录信息会存储在日志文件中，避免重复测试。 使用 root@kitploit: ./adfsbrute.py -t TARGET -u USER -U USERLIST -p PASSWORD -P...
adfsbrute
adfsbrute A script to test credentials against Active Directory Federation Services ADFS, calculating the ADFS url of an organization and allowing password spraying or bruteforce attacks. The main idea is carrying out password spraying attacks with a random and high delay between each test and...
ADFSpray
ADFSpray ADFSpray 是一个用于对 Microsoft ADFS 执行密码喷洒攻击的 Python3 工具。 请务必先验证锁定策略，以防止锁定用户。 使用方式 首先，安装所需的依赖： root@kitploit: pip3 install -r requirements.txt 使用所需参数运行工具： root@kitploit: python3 ADFSpray.py -u 用户名 -p 密码 -t 目标 URL 认证方法 可选项说明 adfs|autodiscover|basicauth 要使用的认证方式，autodiscover 使用 NTLM，adfs 使用...
Carnivore
由 NCC Group Plc 以开源形式发布 - https://www.nccgroup.com/ 由 Chris Nevin 开发，[email protected] https://www.github.com/nccgroup/carnivore 根据 AGPL 许可证发布 https://www.github.com/nccgroup/carnivore/license Carnivore - V.1.0.4 微软外部评估工具 概述： Carnivore 是一个针对 Skype for Business、Exchange、ADFS 和 RDWeb 服务器以及部分...
ADFSRelay
Resumen Este repositorio incluye dos utilidades: NTLMParse y ADFSRelay. NTLMParse es una utilidad para decodificar mensajes NTLM codificados en base64 e imprimir información sobre las propiedades y campos subyacentes dentro del mensaje. Examinar estos mensajes NTLM es útil al investigar el...
msprobe
msprobe About Installing Usage Examples Coming Soon Acknowledgements About Finding all things on-prem Microsoft for password spraying and enumeration. The tool will used a list of common subdomains associated with your target apex domain to attempt to discover valid instances of on-prem Microsoft...
msprobe
msprobe 关于 安装 使用方法 示例 即将推出 致谢 关于 发现所有本地部署的微软产品，用于密码喷洒和枚举。 该工具将使用与目标根域名相关的常见子域名列表，尝试发现有效的本地部署微软解决方案实例。以下是工具运行时的截图： 安装 使用 pipx 安装该项目 root@kitploit: pipx install git+https://github.com/puzzlepeaches/msprobe.git 使用方法 该工具包含四个不同的模块，用于协助发现本地部署的微软产品： Exchange RD Web ADFS Skype for Business 帮助菜单和支持的模块如下所示...
Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099936)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099936 advisory. In the Linux kernel, the following vulnerability has been resolved: fs/adfs: validate nzones in adfsvalidatebblk Reject ADFS disc records with a zero zone count duri...
SUSE CVE-2026-52992
In the Linux kernel, the following vulnerability has been resolved: fs/adfs: validate nzones in adfsvalidatebblk Reject ADFS disc records with a zero zone count during boot block validation, before the disc record is used. When nzones is 0, adfsreadmap passes it to kmallocarray0, ... which return...
Linux Distros Unpatched Vulnerability : CVE-2026-52992
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fs/adfs: validate nzones in adfsvalidatebblk Reject ADFS disc records with a zero zone count during boot block validation, before the disc record is used. When...
CVE-2026-52992
In the Linux kernel, the following vulnerability has been resolved: fs/adfs: validate nzones in adfsvalidatebblk Reject ADFS disc records with a zero zone count during boot block validation, before the disc record is used. When nzones is 0, adfsreadmap passes it to kmallocarray0, ... which return...
CVE-2026-52992
In the Linux kernel, the following vulnerability has been resolved: fs/adfs: validate nzones in adfsvalidatebblk Reject ADFS disc records with a zero zone count during boot block validation, before the disc record is used. When nzones is 0, adfsreadmap passes it to kmallocarray0, ... which return...
CVE-2026-52992
CVE-2026-52992 is a Linux kernel vulnerability affecting ADFS boot-time validation. The issue arises when nzones equals 0 during adfs boot-block validation, leading to an out-of-bounds write (adfs_map_layout writes dm[-1]) via kmalloc_array(0, …). A fix adds the equivalent rejection in adfs_valid...
CVE-2026-52992
In the Linux kernel, the following vulnerability has been resolved: fs/adfs: validate nzones in adfsvalidatebblk Reject ADFS disc records with a zero zone count during boot block validation, before the disc record is used. When nzones is 0, adfsreadmap passes it to kmallocarray0, ... which return...
PT-2026-51886
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds write occurs in the ADFS file system when processing a crafted image with a zero zone count. During boot block validation, if the nzones variable is 0, the adfs read map...
March 2, 2026—KB5082314 (OS Build 20348.4776) Out-of-band
None None...
EUVD-2019-13127
Malware in sbrugna...