623 matches found
Kerberos Silver/Golden/Diamond/Sapphire Ticket Forging
This module forges a Kerberos ticket. Four different techniques can be used: - Silver ticket: Using a service account hash, craft a ticket impersonating any user and privileges to that account. - Golden ticket: Using the krbtgt hash, craft a ticket impersonating any user and privileges. - Diamond...
November 8, 2022—KB5019970 (OS Build 10240.19567) - EXPIRED
None None...
OESA-2023-1017 samba security update
Samba is a suite of programs for Linux and Unix to interoperate with Windows. Security Fixes: Since the Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability was disclosed by Microsoft on Nov 8 2022 and per RFC8429 it is assumed that rc4-hmac is weak, Vulnerable Samba Active Directory DC...
Autobloody - Tool To Automatically Exploit Active Directory Privilege Escalation Paths Shown By BloodHound
autobloody is a tool to automatically exploit Active Directory privilege escalation paths shown by BloodHound. Description This tool automates the AD privesc between two AD objects, the source the one we own and the target the one we want if a privesc path exists in BloodHound database. The...
Amazon Linux 2022 : samba (ALAS2022-2022-224)
The version of samba installed on the remote host is prior to 4.16.2-0. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2022-2022-224 advisory. - A flaw was found in the way samba implemented SMB1 authentication. An attacker could use this flaw to retrieve the...
Failed to Publish FAS Certificate Template with "RPC server unavailable. 0x800706ba"
Failed to publishFAS certificate Template with"An error occurred: CCertAdmin::GetCAProperty:RPC server unavailable. 0x800706ba". On Domain Controller,there is an error message in Event Log "RPCCAUTHNLEVELPKTINTEGRITY"and EventID is 10036...
November 17, 2022—KB5021654 (OS Build 14393.5502) Out-of-band
None None...
KB5021652: Out-of-band update for Windows Server 2012: November 17, 2022
KB5021652: Out-of-band update for Windows Server 2012: November 17, 2022 Summary This update includes improvements for the following: Addresses a known issue that affects Windows Servers that have the Domain Controller DC role. They might have Kerberos authentication issues if both of the followi...
BumbleBee leverages Zerologon to get Domain Controller Access
Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary Since May 2022, threat actors are leveraging BumbleBee as an initial vector from a Contact Forms campaign. The intrusion started with the delivery of an ISO file that contained an LNK and a DLL. Using...
Exploitation of Follina leads to takeover of domain controller
Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary The recent incident is related to TA570, wherein the attackers exploited the Follina vulnerability CVE-2022-30190 to compromise the Domain Controller and eventually gain access to confidential files...
Buffer overflow in Heimdal unwrap_des3()
Description The DES for Samba 4.11 and earlier and Triple-DES decryption routines in the Heimdal GSSAPI library allow a length-limited write buffer overflow on malloc allocated memory when presented with a maliciously small packet. Examples of where Samba can use GSSAPI include the client and...
Defenders beware: A case for post-ransomware investigations
Ransomware is one of the most pervasive threats that Microsoft Detection and Response Team DART responds to today. The groups behind these attacks continue to add sophistication to their tactics, techniques, and procedures TTPs as most network security postures increase. In this blog, we detail a...
Defenders beware: A case for post-ransomware investigations
Ransomware is one of the most pervasive threats that Microsoft Detection and Response Team DART responds to today. The groups behind these attacks continue to add sophistication to their tactics, techniques, and procedures TTPs as most network security postures increase. In this blog, we detail a...
Microsoft Windows Active Directory Certificate Services Improper Authorization Privilege Escalation Vulnerability
This vulnerability allows network-adjacent attackers to escalate privileges on affected installations of Microsoft Windows Active Directory Certificate Services. Authentication is required to exploit this vulnerability. The specific flaw exists within the issuance of certificates. By including...
noPac - Exploiting CVE-2021-42278 And CVE-2021-42287 To Impersonate DA From Standard Domain User
Exploiting CVE-2021-42278 and CVE-2021-42287 to impersonate DA from standard domain user Changed from sam-the-admin. Usage SAM THE ADMIN CVE-2021-42278 + CVE-2021-42287 chain positional arguments: domain/username:password Account used to authenticate to DC. optional arguments: -h, --help show thi...
DEBIAN-CVE-2021-3670
MaxQueryDuration not honoured in Samba AD DC LDAP...
AZL-10662 CVE-2021-3670 affecting package samba 4.12.5-7
MaxQueryDuration not honoured in Samba AD DC LDAP...
CVE-2022-30216 - Authentication coercion of the Windows ?Server? service
In this blog, see how an off-by-one error could lead to domain controller access in Microsoft Server Service...
CVE-2022-30216 - Authentication coercion of the Windows “Server” service
In this blog, see how an off-by-one error could lead to domain controller access in Microsoft Server Service...
The vulnerability of the ActiveDirectory/DC database audit log management module in the Samba networking software package allows a perpetrator to trigger a service failure.
The vulnerability of the ActiveDirectory/DC log management module in the Samba networking software package is related to the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...