ldap_shell

LDAP shell Este proyecto es un fork de ldapshell de Impacket. Proporciona un shell interactivo para la enumeración y manipulación de Active Directory a través de los protocolos LDAP/LDAPS, siendo útil tanto para administradores de sistemas como para profesionales de seguridad. Instalación Estas...

latma

Lateral movement analyzer tool Lateral movement analyzer LATMA collects authentication logs from the domain and Azure AD environments and searches for potential lateral movement attacks and suspicious activity, the lateral movement can be in the AD environment or between cloud and on-prem. The to...

impacket

Impacket Copyright Fortra, LLC and its affiliated companies. All rights reserved. Impacket was originally created by SecureAuth, and now maintained by Fortra's Core Security. Impacket is a collection of Python classes for working with network protocols. Impacket is focused on providing low-level...

impacket

Impacket Copyright Fortra, LLC y sus empresas afiliadas. Todos los derechos reservados. Impacket fue creado originalmente por SecureAuth, y actualmente es mantenido por Core Security de Fortra. Impacket es una colección de clases de Python para trabajar con protocolos de red. Impacket se centra e...

CVE-2025-59390-

CVE-2025-59390- The attached POC will allow you to crack the Kerberos signiture in Apache Druid and also, any integer created by ThreadLocalRandom Advisory - Apache Druid’s Kerberos authenticator uses a weak fallback secret when the druid.auth.authenticator.kerberos.cookieSignatureSecret...

BloodHound.py-Kerberos

What is this fork?! I needed bloodhound with Kerberos support and found this comment. Turns out there was a branch supporting Kerberos auth all along! I took the liberty to merge this branch in to master to get them sweet BloodHound 4.2+ exports. All credit goes to the people who actually wrote t...

Berserko

Berserko - Kerberos authentication for Burp Suite Released as open source by NCC Group Plc - http://www.nccgroup.trust/ Developed by Richard Turnbull, richard dot turnbull at nccgroup dot com http://www.github.com/nccgroup/Berserko Released under AGPL, see LICENSE for more information ❗ Important...

mobileiron-exploit

Tabshell exploit with Kerberos authentication Adapted from The OWASSRF + TabShell exploit chain First, patch the pyprsp module to enable WSManStackVersion downgrading, and install the dependencies root@kitploit: $ git clone https://github.com/jborean93/pypsrp $ patch -p0 pyprsp.patch patching fil...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: ksmbd: Fixed a dangling pointer in krbauthenticate. krbauthenticate frees sess-user and does not set the pointer to NULL. It calls ksmbdkrb5authenticate to reinitialise sess-user, but that function may return without doing so...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: ksmbd: Fixed a use-after-free issue in Kerberos authentication. The introduction of sess-user = NULL was necessary to fix the dangling pointer created by ksmbdfreeuser. However, it is possible that another thread might be...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: smb: client: fixed the issue where krb5 mounts failed when the client tried to mount shares with incorrect credentials. It turned out that the client was reusing the SMB session from the first mount attempt, even though a differe...

CVE-2026-88007

Traefik versions 2.11.0 through 2.11.57 and 3.7.13 contain a backend connection reuse flaw in the HTTP/3 entrypoint. The ConnContext does not call service.AddTransportOnContext, causing kerberosRoundTripper to share a single backend transport across all frontend connections rather than using a de...

CVE-2026-88007

Traefik is an open source HTTP reverse proxy and load balancer. From 2.11.0 until 2.11.57 and 3.7.13, the HTTP/3 entrypoint ConnContext does not call service.AddTransportOnContext, so kerberosRoundTripper uses a shared backend transport instead of a transport dedicated to each frontend connection...

The vulnerability of the Kerberos authentication protocol, related to a countable loss of significance, allows attackers to cause a service failure.

The vulnerability of the Kerberos authentication protocol is related to a countable amount of loss of significance. Exploiting this vulnerability can allow a malicious actor to cause a service failure...

CVE-2026-75159

An unauthenticated client that can reach a MongoDB Connector for BI deployment configured with Kerberos authentication may cause mongosqld to terminate when a crafted authentication exchange encounters a specific GSSAPI error-handling condition. This can interrupt BI Connector availability until...

CVE-2026-75159

CVE-2026-75159 affects MongoDB Connector for BI (mongosqld) deployments configured with Kerberos authentication . An unauthenticated, network-reachable client can trigger a specific GSSAPI error-handling condition during a crafted authentication exchange, causing mongosqld to terminate. This inte...

CVE-2026-75159 MongoDB BI Connector Improper Memory Handling During Failed Kerberos Authentication May Cause Process Termination

An unauthenticated client that can reach a MongoDB Connector for BI deployment configured with Kerberos authentication may cause mongosqld to terminate when a crafted authentication exchange encounters a specific GSSAPI error-handling condition. This can interrupt BI Connector availability until...

MongoDB BI Connector Improper Memory Handling During Failed Kerberos Authentication May Cause Process Termination

An unauthenticated client that can reach a MongoDB Connector for BI deployment configured with Kerberos authentication may cause mongosqld to terminate when a crafted authentication exchange encounters a specific GSSAPI error-handling condition. This can interrupt BI Connector availability until...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ksmbd: A null pointer dereference issue in destroyprevioussession has been fixed. If the -PreviousSessionId is set during the Kerberos session setup phase, a null pointer dereference error may occur. Since sess-user is not set ye...

CVE-2026-76403

In Splunk Connect for Kafka versions below 2.2.7, an unauthenticated user positioned in the network path could read or alter all relevant data sent from the connector when Kerberos authentication is used with Hypertext Transfer Protocol HTTP Event Collector in Splunk Enterprise. The vulnerability...