mimipenguin

MimiPenguin 2.0 현재 리눅스 데스크톱 사용자의 로그인 비밀번호를 덤프하는 도구입니다. 인기 있는 윈도우 도구 mimikatz의 아이디어를 차용했습니다. 이는 CVE-2018-20781 로 지정되었습니다. 재미있는 사실은 GNOME Keyring 3.27.2 이후에도 여전히 수정되지 않았으며 3.28.0.2-1ubuntu1.18.04.1에서도 여전히 작동합니다. 세부 사항 프로세스를 덤프하고 평문 비밀번호를 포함할 가능성이 높은 줄을 추출하여 메모리 내의 평문 자격 증명을 활용합니다. /etc/shadow의 해시,...

RHEL 6 : gnome-keyring (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - gnome-keyring: user's login credentials is kept in a session-child process resulting in exposed plaintext password...

RHEL 7 : gnome-keyring (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - gnome-keyring: user's login credentials is kept in a session-child process resulting in exposed plaintext password...

CVE-2018-20781

creationtimestamp| type| source ---|---|--- 2022-09-19 18:08:50+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/post/linux/gather/mimipenguin.rb 2025-02-06 03:13:43+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:10:07+00:00| seen|...

Mageia: Security Advisory (MGASA-2019-0111)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization 3.0.6.6 : gnome-keyring (EulerOS-SA-2021-1478)

According to the version of the gnome-keyring packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - In pam/gkr-pam-module.c in GNOME Keyring before 3.27.2, the user's password is kept in a session-child process spawned from t...

EulerOS 2.0 SP2 : gnome-keyring (EulerOS-SA-2021-1300)

According to the version of the gnome-keyring packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - In pam/gkr-pam-module.c in GNOME Keyring before 3.27.2, the user's password is kept in a session-child process spawned from the LightDM...

Huawei EulerOS: Security Advisory for gnome-keyring (EulerOS-SA-2021-1300)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for gnome-keyring (EulerOS-SA-2021-1071)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for gnome-keyring (EulerOS-SA-2020-2283)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP5 : gnome-keyring (EulerOS-SA-2020-2283)

According to the version of the gnome-keyring packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - In pam/gkr-pam-module.c in GNOME Keyring before 3.27.2, the user's password is kept in a session-child process spawned from the LightDM...

CVE-2018-20781

In pam/gkr-pam-module.c in GNOME Keyring before 3.27.2, the user's password is kept in a session-child process spawned from the LightDM daemon. This can expose the credential in cleartext...

CVE-2018-20781

In pam/gkr-pam-module.c in GNOME Keyring before 3.27.2, the user's password is kept in a session-child process spawned from the LightDM daemon. This can expose the credential in cleartext...

CVE-2018-20781

CVE-2018-20781 affects GNOME Keyring before 3.27.2. The vulnerability occurs when the user’s password is kept in a session-child process spawned from the LightDM daemon via pam/gkr-pam-module.c, allowing the credential to be exposed in cleartext. Impact is local, with partial confidentiality and ...

CVE-2018-20781

In pam/gkr-pam-module.c in GNOME Keyring before 3.27.2, the user's password is kept in a session-child process spawned from the LightDM daemon. This can expose the credential in cleartext...

MimiPenguin

This searches process memory for needles that indicate where cleartext passwords may be located. If any needles are discovered in the target process memory, collected strings in adjacent memory will be hashed and compared with password hashes found in /etc/shadow. Module Options msf use...