ADFSpray

ADFSpray ADFSpray는 Microsoft ADFS에 대해 암호 스프레이 공격을 수행하는 파이썬3 도구입니다. 사용자 잠금을 방지하기 위해 항상 잠금 정책을 확인하세요. 사용 방법 먼저 필요한 종속성을 설치합니다: pip3 install -r requirements.txt 필요한 플래그를 사용하여 도구를 실행합니다: python3 ADFSpray.py -u 사용자명 -p 비밀번호 -t 대상 URL 방식 고려해야 할 옵션 adfs|autodiscover|basicauth 사용할 인증 방식으로, autodiscover는...

EUVD-2018-8594

Malware in sbrugna...

Hackers Using Fake Microsoft ADFS Login Pages to Steal Credentials

A global phishing campaign is actively exploiting a legacy Microsoft authentication system to steal user credentials and bypass multi-factor authentication MFA, targeting over 150 organizations...

Stack overflow

Microsoft ADFS 4.0 Windows Server 2016 and previous Active Directory Federation Services has an SSRF vulnerability via the txtBoxEmail parameter in /adfs/ls...

CVE-2018-16794: Server-Side Request Forgery (SSRF)

Microsoft ADFS 4.0 Windows Server 2016 and previous Active Directory Federation Services has an SSRF vulnerability via the txtBoxEmail parameter in /adfs/ls...

Microsoft Web Customization for ADFS CVE-2018-8326 Cross Site Scripting Vulnerability

Description Microsoft Web Customization for ADFS is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected...

Microsoft ADFS服务请求头验证远程代码执行漏洞（MS09-070）

BUGTRAQ ID: 37214 CVE ID: CVE-2009-2509 Microsoft Windows是微软发布的非常流行的操作系统。 由于通过认证的用户在连接到启用了活动目录联合服务（ADFS）的Web服务器时没有正确地验证请求头，导致ADFS实现中存在远程代码执行漏洞。远程攻击者可以通过向服务器提交恶意的HTTP请求导致以Worker Process Identity的权限执行任意代码。 Microsoft Windows Server 2008 SP2 Microsoft Windows Server 2008 Microsoft Windows Server 2003...