SCCMSecrets

SCCMSecrets SCCMSecrets.py is an SCCM policies exploitation tool. It goes beyond NAA credentials extraction, and aims to provide a comprehensive approach regarding SCCM policies exploitation. The tool can be executed from various levels of privileges, and will attempt to uncover potential...

CcmMessagingBackdoor

CcmMessagingBackdoor Management Point 上でアクセスを維持するために、不正な CcmMessaging サービスを構築・インストールする Proof of Concept ツール 使用法 Management Point 上で不正な COM サービスをコンパイルしてインストールします Compile PS C:\ C:\Windows\Microsoft.NET\Framework64\v2.0.50727\csc.exe /t:library /out:c:\rogue.dll RogueCcmEndpoint.cs Register CLSID P...

sccm_sql_backdoor

sccmsqlbackdoor A proof‑of‑concept tool that implants a controlled backdoor into a Management Point stored procedure, enabling indirect SQL execution through a legitimate MP HTTP service. Installation You can install by cloning the repository and installing the dependencies. $ git clone...

CVE-2024-43468

Microsoft Configuration Manager ConfigMgr / SCCM 2403 の未認証SQLインジェクション CVE-2024-43468 エクスプロイト このスクリプトは、CVE-2024-43468 を悪用します。この脆弱性により、Management Point にネットワークアクセスできる認証されていない攻撃者が、サイトデータベース上で任意の SQL クエリを実行できます。 クエリは sysadmin ロールが付与された MP マシンアカウントの ID で実行されるため、SQL インジェクションを たとえば xpcmdshell を使って...

CVE-2026-70560: Improper Neutralization of Input During Web Page Generation

Ultimate POS Stock Management & Point of Sale contains a stored cross-site scripting vulnerability that allows low-privileged authenticated attackers to inject arbitrary HTML and script markup by setting a malicious payload in the user first-name field during account creation. Attackers with a...

Iris ID IrisAccess iCAM4000iCAM7000 - Hard-Coded Credentials Remote Shell Access

Iris ID IrisAccess iCAM4000iCAM7000 - Hard-Coded Credentials Remote Shell Access Iris ID IrisAccess iCAM4000/iCAM7000 Hardcoded Credentials Remote Shell Access Vendor: Iris ID, Inc. Product web page: http://www.irisid.com http://www.irisid.com/productssolutions/irisaccesssystem/irisaccess4000/...

Microsoft System Center Configuration Manager Management Point Detection

The remote service is a Management Point for a Microsoft System Center Configuration Manager server. It is used by client agents to communicate with the Configuration Manager. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid51836; scriptversion"1.9";...