50 matches found
ACLight
ACLight 特権アカウントの高度な発見のためのツール - シャドウアドミンを含む。 ACLight2はこのツールの改良版です。 シャドウアドミン研究 このツール（バージョン1）は「シャドウアドミン」研究の一部として公開されました - 「シャドウアドミン」の詳細はブログ記事をご覧ください: https://www.cyberark.com/threat-research-blog/shadow-admins-stealthy-accounts-fear この研究はロンドンのInfoSecurityカンファレンスでも発表されました: プレゼンテーションリンク 概要...
TruffleSnout
TruffleSnout 攻撃側オペレーター向けの反復型AD探索ツールキット。状況認識と低ノイズな標的列挙。OpSecを優先。 発見: フォレストとトラスト ドメインとトラスト GC/DC ADの検索と照会: オブジェクトとデータに対して 防御的なcircuit breakerをトリガーしないための制限 属性の絞り込みを支援する細粒度の生LDAPクエリ ユーティリティ、ヘルパー、コンバータ 使い方 を参照 豚はその評判に反して、汚い動物ではありません。実際にはとても清潔です。汚い動物という評判は、体温を下げるために泥の中で転がる習性に由来しています。 私たちはこれを OpSec と呼びま...
cleanldap
CleanLdap 用于通过 AD WS 执行隐蔽 LDAP 查询的 BOF 参数 直接切入正题，以下是参数及其含义： root@kitploit: Z: DC Hostname "dc01.example.com" Z: LDAP query "objectClass=" Z: Comma separated list of LDAP attributes "samaccountname,distinguishedName,cn" - if empty, collect all Z: Base DN "DC=example,DC=com" - if empty parse from...
bofhound
THIS REPO IS NO LONGER ACTIVE ⛔🚧 This repo is no longer maintained. To submit an issue, pull request, or obtain the lastest version, reference https://github.com/coffeegist/bofhound 🚧⛔ root@kitploit: | / / / | /| | | | / \ | | | | | \ | | | \ | | | | | | | | | | || | | | | | | | | | | | | | .--. ...
CVE-2026-4256
Improper neutralization of special elements used in an LDAP query 'LDAP injection' vulnerability in PEAKUP Technology Inc. PassGate allows LDAP Injection. This issue affects PassGate: through 30042026...
EUVD-2026-42586
Improper neutralization of special elements used in an LDAP query 'LDAP injection' vulnerability in PEAKUP Technology Inc. PassGate allows LDAP Injection. This issue affects PassGate: through 30042026...
CVE-2026-33609
A flaw was found in PowerDNS. When running with 8bit-dns enabled, incomplete escaping of Lightweight Directory Access Protocol LDAP queries allows authenticated users to perform queries of internal domain subtrees. This vulnerability can lead to information disclosure, potentially exposing...
CVE-2026-40459
PAC4J is vulnerable to LDAP Injection in multiple methods. A low-privileged remote attacker can inject crafted LDAP syntax into ID-based search parameters, potentially resulting in unauthorized LDAP queries and arbitrary directory operations. This issue was fixed in PAC4J versions 4.5.10, 5.7.10...
Bouncy Castle Java 安全漏洞
Bouncy Castle Java is an open-source encryption algorithm developed by Legion of the Bouncy Castle Inc. Versions of Bouncy Castle Java prior to 1.84 contained security vulnerabilities, which were caused by improper handling of special elements in LDAP queries. These vulnerabilities could lead to...
EUVD-2006-6537
Malware in sbrugna...
EUVD-2021-26962
Malware in sbrugna...
EUVD-2014-5995
Malware in sbrugna...
EUVD-2022-29542
Malicious code in bioql PyPI...
CVE-2021-33668
Due to improper input sanitization, specially crafted LDAP queries can be injected by an unauthenticated user. This could partially impact the confidentiality of the application...
Adobe RoboHelp Server resolveDistinguishedName LDAP Injection Information Disclosure Vulnerability
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe RoboHelp Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the resolveDistinguishedName method. The issue results from the lack of...
October 10, 2023—KB5031411 (Security-only update)
None None...
ForgeRock Access Management 6.0.0.x / 6.5.0.x / 6.5.2.x / 6.5.3 / 6.5.4 / 7.0.x / 7.1 / 7.1.1 Multiple Vulnerabilities
The version of ForgeRock Access Management detected on the remote host is affected by multiple vulnerabilities, including the following: - It may be possible to gain some details of the deployment through a well-crafted attack. This may allow that data to be used to probe internal network service...
CVE-2022-24670
An attacker can use the unrestricted LDAP queries to determine configuration entries...
