50 matches found
LAPSToolkit
LAPSToolkit PowerShell로 작성된 함수들로, PowerView를 활용하여 Microsoft의 LAPSLocal Administrator Password Solution가 배포된 Active Directory 환경을 감사하고 공격합니다. 여기에는 sysadmin이 특별히 위임한 그룹 찾기, "All Extended Rights"를 가진 사용자비밀번호를 볼 수 있는 찾기, LAPS가 활성화된 모든 컴퓨터 보기가 포함됩니다. 문제점이나 성능 개선 사항이 있으면 이슈나 의견을 제출해 주세요. 이 프로젝트는 이전 버전의...
OneLogicalMyth_Shell
OneLogicalMythShell 此 HTA Shell 旨在协助进行突破评估（breakout assessments）。我最初在一年多前构建了它，认为其他人可能会觉得它有用，因此现在将其公开。欢迎随时提交拉取请求。 功能特性 文件资源管理器 列出驱动器 - 列出主机上的所有本地驱动器。然后您可以点击驱动器号开始浏览文件夹和文件。 列出文件夹 - 在顶部输入框中输入文件夹路径并点击此按钮，将从该位置开始浏览。 用户配置文件文件夹 - 从 %userprofile% 文件夹开始浏览。 读取文件 -...
SecurEnvoy Two Factor Authentication - LDAP Injection
Multiple LDAP injections vulnerabilities exist in SecurEnvoy MFA before 9.4.514 due to improper validation of user-supplied input. An unauthenticated remote attacker could exfiltrate data from Active Directory through blind LDAP injection attacks against the DESKTOP service exposed on the...
SharpLAPS
SharpLAPS L'attributo ms-mcs-AdmPwd memorizza la password LAPS in chiaro. Questo eseguibile è progettato per essere eseguito in una sessione di Cobalt Strike usando execute-assembly. Recupererà la password LAPS dall'Active Directory. Richiede uno dei seguenti: Account con ExtendedRight o Generic...
adaudit
adaudit This PowerShell script is designed to conduct a comprehensive audit of Microsoft Active Directory, focusing on identifying common security vulnerabilities and weaknesses. Its execution facilitates the pinpointing of critical areas that require reinforcement, thereby fortifying your...
Remote-Desktop-Caching-
Remote-Desktop-Caching- Mit diesem Tool können alte RDP mstsc-Sitzungsinformationen in Form von beschädigten PNG-Dateien wiederhergestellt werden. Diese PNG-Dateien ermöglichen es Red-Team-Mitgliedern, vertrauliche Informationen wie LAPS-Passwörter oder andere sensible Bildschirminhalte zu...
GetLAPSPassword
GetLAPSPassword Ein schwacher Versuch, ein LAPS-Dumping-Tool zu schreiben, das sowohl NTLM- als auch Kerberos-Authentifizierung mithilfe der Impacket-Bibliothek unterstützt. Die ursprüngliche Struktur dieses Tools stammt aus dem Impacket-Beispiel GetADUsers.py...
CVE-2025-15552
Insufficient Session Expiration in Truesec’s LAPSWebUI before version 2.4 allows an attacker with access to a workstation to escalate their privileges via disclosure of local admin password...
EUVD-2025-208691
Insufficient Session Expiration in Truesec’s LAPSWebUI before version 2.4 allows an attacker with access to a workstation to escalate their privileges via disclosure of local admin password...
EUVD-2025-208693
Non-working logout functionality in Truesec’s LAPSWebUI before version 2.4 allows an attacker with access to a workstation to escalate their privileges via disclosure of local admin password...
CVE-2025-15554
The CVE-2025-15554 issue affects Truesec’s LAPSWebUI prior to 2.4, where browser caching of LAPS passwords can enable local privilege escalation if an attacker has workstation access. The reports consistently describe the vulnerability as arising from how passwords are stored in the browser cache...
CVE-2025-15554
Browser caching of LAPS passwords in Truesec’s LAPSWebUI before version 2.4 allows an attacker with access to a workstation to escalate their privileges via disclosure of local admin passwords...
CVE-2025-15554 Admin Passwords Cached by Browsers in Truesec LAPSWebUI
Browser caching of LAPS passwords in Truesec’s LAPSWebUI before version 2.4 allows an attacker with access to a workstation to escalate their privileges via disclosure of local admin passwords...
CVE-2025-15553
CVE-2025-15553 affects Truesec’s LAPSWebUI prior to version 2.4. The issue is a non-working logout function that can permit an attacker with workstation access to escalate privileges by disclosure of the local admin password. The vulnerability’s impact is described as privilege escalation with hi...
CVE-2025-15552
CVE-2025-15552 affects Truesec LAPSWebUI prior to version 2.4. The root cause is insufficient session expiration, which can allow a workstation-occupied attacker to escalate privileges by disclosure of the local admin password. The available connected sources corroborate a local-attack vector wit...
PT-2026-25676
Non-working logout functionality in Truesec’s LAPSWebUI before version 2.4 allows an attacker with access to a workstation to escalate their privileges via disclosure of local admin password...
Malicious code in mitk-oni-laps (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70bc013b814bb39527dadfbda3215f770d72caf832836687257e42d2a2027558 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
CVE-2024-37393
Multiple LDAP injections vulnerabilities exist in SecurEnvoy MFA before 9.4.514 due to improper validation of user-supplied input. An unauthenticated remote attacker could exfiltrate data from Active Directory through blind LDAP injection attacks against the DESKTOP service exposed on the...
