181 matches found
Locksmith
Locksmith | | | | |/ | | | | | | || | || | | \ | | | | | | | | .--. .--. .--. /.-. '----------. /.-. '----------. /.-. '----------. '-' .---'-''-'-' '-' .--'--''-'-' '-' .--'--'-''-' '--' '--' '--' Una pequeña herramienta creada para encontrar y corregir configuraciones incorrectas comunes en...
PKINITtools
PKINIT 工具 本仓库包含一些用于操作 PKINIT 和证书的实用工具。 这些工具基于 minikerberos 和 impacket 构建。相关的博客文章提供更多背景信息：https://dirkjanm.io/ntlm-relaying-to-ad-certificate-services/ 安装 这些工具仅兼容 Python 3.5+。从 GitHub 克隆仓库，安装依赖项即可使用： git clone https://github.com/dirkjanm/PKINITtools pip3 install impacket minikerberos...
CVE-2026-54121
🛡️ CVE-2026-54121 — Investigación CTI de Certighost Escalada de privilegios en Active Directory Certificate Services / Riesgo de compromiso del dominio Creado por Pratik Chhetri Fecha del informe: 2026-07-28 📌 Resumen ejecutivo Campo| Hallazgo ---|--- CVE| CVE-2026-54121 Nombre| Certighost...
CVE-2022-26923
CVE-2022-26923 描述 此漏洞允许低权限用户在默认的 Active Directory 环境中，在安装了 Active Directory 证书服务 AD CS 服务器角色的情况下，将权限提升至域管理员。 该漏洞主要与 Active Directory 证书服务 AD CS 角色相关。AD CS 角色是一种 Windows Server 角色，允许您构建公钥基础设施 PKI，并为您的组织提供公钥加密、数字证书和数字签名功能。AD CS 角色用于为用户、计算机和服务颁发证书。 目录 CVE-2022-26923 描述 目录 前提条件 环境 利用 概念验证 参考文献 前提条件...
TryHackMe-CVE-2022-26923
TryHackMe-CVE-2022-26923 Tutorial sobre la explotación de CVE-2022-26923, una vulnerabilidad en los Servicios de Certificados de AD CVE-2022-26923 TryHackMe | CVE-2022-26923 Tarea 1 Introducción Guía de actualización de seguridad - Microsoft Security Response Center TryHackMe | Active Directory...
certipy-merged
certipy-merged Este repositorio contiene un fork de ly4k/Certipy con muchos pull requests abiertos fusionados, hechos compatibles entre sí y probados hasta cierto punto. Como esto es un trabajo en curso , algunas funciones pueden o no funcionar como se espera y las cosas podrían romperse...
CVE-2026-54121-Certighost
🛡 Módulo de Herramienta de Seguridad IA CVE-2026-54121: Suplantación de Active Directory Certificate Services Certighost Módulo Oficial de Auditoría de Seguridad para el Ecosistema de Herramientas de Seguridad IA 🌐 Demostración Web • 📚 Sitio Web del Proyecto • 💬 Chat de la Comunidad Navegación de...
CVE-2022-26923_AD-Certificate-Services
CVE-2022-26923 AD 证书服务 发布日期 ：2022年5月10日 攻击复杂度：低 所需权限：低 CVSS 评分： 8.1 该漏洞允许低权限用户在默认的 Active Directory 环境中（安装有 Active Directory 证书服务 AD CS 服务器角色）将权限提升为域管理员。 由 Oliver Lyak ly4k 用 Python 开发了一个利用程序，并在公告发布之前（而非之后）公开。它被声明为概念验证。该利用程序可在 research.ifcr.dk 下载。 来源：...
CVE-2026-69624
Incomplete list of disallowed inputs in Active Directory Certificate Services AD CS allows an authorized attacker to perform tampering over a network...
EUVD-2026-73552
Incomplete list of disallowed inputs in Active Directory Certificate Services AD CS allows an authorized attacker to perform tampering over a network...
CVE-2026-69395: Use of Externally-Controlled Format String
Use of externally-controlled format string in Active Directory Certificate Services AD CS allows an authorized attacker to disclose information over a network...
CVE-2026-62810: Heap-based Buffer Overflow
Heap-based buffer overflow in Active Directory Certificate Services AD CS allows an authorized attacker to elevate privileges locally...
CVE-2026-69624: Incomplete List of Disallowed Inputs
Incomplete list of disallowed inputs in Active Directory Certificate Services AD CS allows an authorized attacker to perform tampering over a network...
CVE-2026-69821: Improper Encoding or Escaping of Output
Improper encoding or escaping of output in Active Directory Certificate Services AD CS allows an authorized attacker to elevate privileges locally...
CVE-2026-62818
Use after free in Active Directory Certificate Services AD CS allows an authorized attacker to execute code over a network...
CVE-2026-62818
CVE-2026-62818 affects Microsoft Windows Active Directory Certificate Services (AD CS). The vulnerability is a use-after-free in AD CS that allows an authorized attacker to execute arbitrary code over a network. CVSS v3.1 base metrics indicate a HIGH severity (8.8) with Network attack vector, Low...
CVE-2026-62818: Use After Free
Use after free in Active Directory Certificate Services AD CS allows an authorized attacker to execute code over a network...
PT-2026-70558
Name of the Vulnerable Software and Affected Versions Active Directory Certificate Services affected versions not specified Description A use after free issue in Active Directory Certificate Services allows an authorized attacker to execute arbitrary code over a network, which can affect the...
