ADFSpray

ADFSpray ADFSpray è uno strumento python3 per effettuare attacchi di password spray contro Microsoft ADFS. VERIFICARE SEMPRE LA POLITICA DI BLOCCO PER PREVENIRE IL BLOCCO DEGLI UTENTI. Come usarlo Prima, installa le dipendenze necessarie: root@kitploit: pip3 install -r requirements.txt Esegui lo...

EUVD-2018-8594

Malware in sbrugna...

Hackers Using Fake Microsoft ADFS Login Pages to Steal Credentials

A global phishing campaign is actively exploiting a legacy Microsoft authentication system to steal user credentials and bypass multi-factor authentication MFA, targeting over 150 organizations...

Stack overflow

Microsoft ADFS 4.0 Windows Server 2016 and previous Active Directory Federation Services has an SSRF vulnerability via the txtBoxEmail parameter in /adfs/ls...

Microsoft Web Customization for ADFS CVE-2018-8326 Cross Site Scripting Vulnerability

Description Microsoft Web Customization for ADFS is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected...

Microsoft ADFS服务请求头验证远程代码执行漏洞（MS09-070）

BUGTRAQ ID: 37214 CVE ID: CVE-2009-2509 Microsoft Windows是微软发布的非常流行的操作系统。 由于通过认证的用户在连接到启用了活动目录联合服务（ADFS）的Web服务器时没有正确地验证请求头，导致ADFS实现中存在远程代码执行漏洞。远程攻击者可以通过向服务器提交恶意的HTTP请求导致以Worker Process Identity的权限执行任意代码。 Microsoft Windows Server 2008 SP2 Microsoft Windows Server 2008 Microsoft Windows Server 2003...