mimipenguin

MimiPenguin 2.0 현재 리눅스 데스크톱 사용자의 로그인 비밀번호를 덤프하는 도구입니다. 인기 있는 윈도우 도구 mimikatz의 아이디어를 차용했습니다. 이는 CVE-2018-20781 로 지정되었습니다. 재미있는 사실은 GNOME Keyring 3.27.2 이후에도 여전히 수정되지 않았으며 3.28.0.2-1ubuntu1.18.04.1에서도 여전히 작동합니다. 세부 사항 프로세스를 덤프하고 평문 비밀번호를 포함할 가능성이 높은 줄을 추출하여 메모리 내의 평문 자격 증명을 활용합니다. /etc/shadow의 해시,...

RdpThief

RdpThief RdpThief는 그 자체로 독립형 DLL이며, mstsc.exe 프로세스에 인젝션될 때 API 후킹을 수행하고, 평문 자격 증명을 추출하여 파일에 저장합니다. 이와 함께 제공되는 aggressor 스크립트는 상태 관리, 새 프로세스 모니터링, mstsc.exe에 셸코드 인젝션을 담당합니다. DLL은 sRDI 프로젝트https://github.com/monoxgas/sRDI를 사용하여 셸코드로 변환되었습니다. 활성화되면 RdpThief는 5초마다 프로세스 목록을 가져와 mstsc.exe를 검색하고 인젝션합니다...

c0ntextomy

c0ntextomy 비공식적 오류informal fallacy이자 잘못된 귀속false attribution의 한 유형으로, 문맥에서 벗어난 인용이 원래 의도를 왜곡하는 방식 Wikipedia - Contextomy 디버그 세션 하이재킹, 원격 코드 실행, 민감한 데이터 유출 취약점을 시연하는 개념 증명Proof of Concept. 권고 macOS/Xcode의 MobileDevice.framework와 iOS/iPadOS/tvOS용 Development Tools의 설계 결함으로 인해, 서비스 연결 설정이 실제 SSL...

SMWYG-Show-Me-What-You-Got

SMWYG-Show-Me-What-You-Got 이 도구는 조직 또는 개인에 대한 OSINT 및 정찰Reconnaissance을 수행할 수 있게 해줍니다. BreachCompilation 유출의 일부로 덤프된 14억 개의 평문 자격 증명을 검색할 수 있습니다. 이 데이터베이스는 비밀번호 검색을 그 어느 때보다 빠르고 쉽게 만듭니다. 스크린샷 위 이미지는 uber.com의 자격 증명을 검색하여 203개의 계정을 찾았습니다. 사전 요구 사항 다음이 설치되어 있는지 확인하세요: - Python 3.0 이상. - pip3 sudo...

rConfig <=3.9.4 - SQL Injection

rConfig 3.9.4 and prior has unauthenticated snippets.inc.php SQL injection. Because nodes' passwords are stored in cleartext by default, this vulnerability leads to lateral movement, granting an attacker access to monitored network devices. id: CVE-2020-10549 info: name: rConfig 3.9.4 or apply th...

CVE-2025-60791

CVE-2025-60791 CVE-2025-60791: メモリ内の機密情報の平文保存。 Easywork Enterprise 2.1.3.354 は、メモリ内の機密情報の平文保存に対して脆弱です。このアプリケーションは、アクティベーションの試行が失敗した後も、デバイスに紐付けられた有効なライセンスキーをプロセスメモリ内に残します。このキーは、デバッガを接続するか、プロセス/メモリダンプを解析することで取得でき、その後、購入することなく同じマシン上でソフトウェアをアクティベートするために使用できます。...

Rocky Linux 8 [CIQ] Security Update: cloud-init (crlsa-2021_3081)

The Rocky Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CIQ crlsa-20213081 advisory. cloud-init: randomly generated passwords logged in clear-text to world-readable file CVE-2021-3429 Tenable has extracted the preceding description block directly fr...

Debian dla-4797 : lemonldap-ng - security update

The remote Debian 12 host has packages installed that are affected by a vulnerability as referenced in the dla-4797 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4797-1 [email protected] https://www.debian.org/lts/security/...

EUVD-2025-210960

IBM Controller 11.0.0 through 11.0.1 FP7, and 11.1.0 through 11.1.3 FP1 transmits data in clear text that could allow an attacker to obtain sensitive information using man in the middle techniques...

CVE-2025-36421 Multiple vulnerabilities in IBM Controller

IBM Controller 11.0.0 through 11.0.1 FP7, and 11.1.0 through 11.1.3 FP1 transmits data in clear text that could allow an attacker to obtain sensitive information using man in the middle techniques...

CVE-2025-36421 Multiple vulnerabilities in IBM Controller

IBM Controller 11.0.0 through 11.0.1 FP7, and 11.1.0 through 11.1.3 FP1 transmits data in clear text that could allow an attacker to obtain sensitive information using man in the middle techniques...

CVE-2025-36421

IBM Controller versions 11.0.0 through 11.0.1 FP7 and 11.1.0 through 11.1.3 FP1 are affected by a cleartext transmission vulnerability (CWE-319 ). The product transmits data without encryption, allowing an attacker positioned between the client and server to intercept and obtain sensitive informa...

PT-2026-95444

Name of the Vulnerable Software and Affected Versions IBM Controller versions 11.0.0 through 11.0.1 FP7 IBM Controller versions 11.1.0 through 11.1.3 FP1 Description The software transmits data in clear text, which could allow an attacker to obtain sensitive information using man-in-the-middle...

CVE-2026-73457

CVE-2026-73457 affects Arista EOS platforms with the gRPC Network Packet Sampling Interface (gNPSI) enabled. When the EosRpcAuth trace facility is explicitly activated on the Gnpsi agent, client credentials (username and password) are written in clear text to local or remote accounting logs, acce...

EUVD-2026-81008

Under certain circumstances on affected platforms running Arista EOS with gRPC Network Packet Sampling Interface gNPSI enabled, the gNPSI client credentials might be logged in clear text in local or remote accounting logs to authenticated users...

CVE-2026-73457 Under certain circumstances, the gNPSI client credentials might be logged in clear text, in local or remote accounting logs to authenticated users.

Under certain circumstances on affected platforms running Arista EOS with gRPC Network Packet Sampling Interface gNPSI enabled, the gNPSI client credentials might be logged in clear text in local or remote accounting logs to authenticated users...

CVE-2026-73457: Insertion of Sensitive Information into Log File

Under certain circumstances on affected platforms running Arista EOS with gRPC Network Packet Sampling Interface gNPSI enabled, the gNPSI client credentials might be logged in clear text in local or remote accounting logs to authenticated users...

CVE-2026-73466

On affected platforms running Arista EOS, under certain circumstances user passwordss may be written in clear text to log files during operations when specialized non-standard debugging trace levels are explicitly enabled. To exploit these vulnerabilities, a malicious actor must already possess...

EUVD-2026-79024

On affected platforms running Arista EOS, under certain circumstances user passwordss may be written in clear text to log files during operations when specialized non-standard debugging trace levels are explicitly enabled. To exploit these vulnerabilities, a malicious actor must already possess...

CVE-2026-73466: Insertion of Sensitive Information into Log File

On affected platforms running Arista EOS, under certain circumstances user passwordss may be written in clear text to log files during operations when specialized non-standard debugging trace levels are explicitly enabled. To exploit these vulnerabilities, a malicious actor must already possess...