assless-chaps

assless-chaps Crack MSCHAPv2/NTLMv1 challenge/responses quickly using a database of NT hashes Introduction Assless CHAPs is an efficient way to recover the NT hash used in a MSCHAPv2/NTLMv1 exchange if you have the challenge and response e.g. from a WiFi EAP WPE attack. It requires a database of ...

assless-chaps

assless-chaps MSCHAPv2/NTLMv1 challenge/response를 NT 해시 데이터베이스를 사용하여 빠르게 크랙합니다 소개 Assless CHAPs는 MSCHAPv2/NTLMv1 교환에서 challenge와 response예: WiFi EAP WPE 공격가 있을 때 사용된 NT 해시를 효율적으로 복구하는 방법입니다. NT 해시 데이터베이스가 필요하며, 기존 목록에서 생성하거나 hashcat을 단어 목록 및 규칙과 함께 사용하여 만드는 방법은 아래에 설명되어 있습니다. SecLists의 샘플 데이터베이스가...

ShuckNT

🔐 ShuckNT : 크랙 시도 전에 해시 셰킹Shuck하기 | Shuck.sh의 스크립트 ShuckNT 는 온프레미스 사용을 위한 Shuck.sh 온라인 서비스의 스크립트입니다 온라인으로 사용해 보기!. DESData Encryption Standard 기반 인증 토큰을 다운그레이드, 변환, 분석dissect 및 셰킹shuck하도록 설계되었습니다. 지원되는 알고리즘 / 형식: MSCHAPv2 NETNTLM LM|NTHASH PPTP-VPN $99$ 모든 챌린지 값 지원! ShuckNT 는 해시 셰킹hash shucking 원...

NewStart CGSL MAIN 7.02 : strongswan Vulnerability (NS-SA-2026-0099)

The remote NewStart CGSL host, running version MAIN 7.02, has strongswan packages installed that are affected by a vulnerability: - In the eap-mschapv2 plugin client-side in strongSwan before 6.0.3, a malicious EAP-MSCHAPv2 server can send a crafted message of size 6 through 8, and cause an integ...

AZL-74766 CVE-2025-62291 affecting package strongswan for versions less than 5.9.10-4

In the eap-mschapv2 plugin client-side in strongSwan before 6.0.3, a malicious EAP-MSCHAPv2 server can send a crafted message of size 6 through 8, and cause an integer underflow that potentially results in a heap-based buffer overflow...

ALPINE-CVE-2025-62291

In the eap-mschapv2 plugin client-side in strongSwan before 6.0.3, a malicious EAP-MSCHAPv2 server can send a crafted message of size 6 through 8, and cause an integer underflow that potentially results in a heap-based buffer overflow...

CVE-2025-62291

CVE-2025-62291 affects the eap-mschapv2 plugin in strongSwan (client-side). Vulnerable when using strongSwan before 6.0.3; a crafted EAP-MSCHAPv2 Failure message can trigger an integer underflow, potentially causing a heap-based buffer overflow. Connected advisories note patched packages: strongS...

CVE-2025-62291

In the eap-mschapv2 plugin client-side in strongSwan before 6.0.3, a malicious EAP-MSCHAPv2 server can send a crafted message of size 6 through 8, and cause an integer underflow that potentially results in a heap-based buffer overflow...

CVE-2025-62291: Integer Underflow (Wrap or Wraparound)

In the eap-mschapv2 plugin client-side in strongSwan before 6.0.3, a malicious EAP-MSCHAPv2 server can send a crafted message of size 6 through 8, and cause an integer underflow that potentially results in a heap-based buffer overflow...

openSUSE 16 Security Update : strongswan (openSUSE-SU-2025-20132-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2025-20132-1 advisory. - CVE-2025-62291: Fixed buffer overflow when handling EAP-MSCHAPv2 failure requests bsc1251941. Tenable has extracted the preceding description block...

SUSE-SU-2025:21167-1 Security update for strongswan

This update for strongswan fixes the following issues: - CVE-2025-62291: Fixed buffer overflow when handling EAP-MSCHAPv2 failure requests bsc1251941...

OPENSUSE-SU-2025:20132-1 Security update for strongswan

This update for strongswan fixes the following issues: - CVE-2025-62291: Fixed buffer overflow when handling EAP-MSCHAPv2 failure requests bsc1251941...

Mageia: Security Advisory (MGASA-2025-0272)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2025:3904-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 4359-1] strongswan security update

Debian LTS Advisory DLA-4359-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany November 03, 2025 https://wiki.debian.org/LTS Package : strongswan Version : 5.9.1-1+deb11u5 CVE ID : CVE-2025-62291 Xu Biang discovered a buffer overflow bug in the eap-mschapv2 plugin...

Debian dla-4359 : charon-cmd - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-4359 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4359-1 [email protected] https://www.debian.org/lts/security/...

SUSE: Security Advisory (SUSE-SU-2025:3873-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2025:3904-1 Security update for strongswan

This update for strongswan fixes the following issues: - CVE-2025-62291: fixed buffer overflow when handling EAP-MSCHAPv2 failure requests bsc1251941...

SUSE: Security Advisory (SUSE-SU-2025:3856-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2025:3857-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...