19 matches found
GPOddity
GPOddity GPOddity 项目旨在通过 NTLM 中继（及其他方式）实现 GPO 攻击向量的自动化。 有关攻击的更多详细信息以及如何使用该工具的演示，请参阅相关文章： https://www.synacktiv.com/publications/gpoddity-exploiting-active-directory-gpos-through-ntlm-relaying-and-more 安装 Pipx 你可以通过以下命令使用 pipx 安装 GPOddity： $ python3 -m pipx install...
ADFSRelay
概述 此仓库包含两个工具：NTLMParse 和 ADFSRelay。NTLMParse 是一个用于解码 base64 编码的 NTLM 消息并打印消息中底层属性和字段信息的实用程序。分析这些 NTLM 消息有助于研究特定 NTLM 实现的行为。ADFSRelay 是一个概念验证工具，是在研究针对 ADFS 服务的 NTLM 中继攻击可行性时开发的。此工具可用于执行针对 ADFS 的 NTLM 中继攻击。我们还发布了一篇博客文章，更详细地讨论了 ADFS 中继攻击1。 NTLMParse 用法 要使用 NTLMParse 工具，只需向应用程序传递一条 Base64...
PKINITtools
PKINIT 工具 本仓库包含一些用于操作 PKINIT 和证书的实用工具。 这些工具基于 minikerberos 和 impacket 构建。相关的博客文章提供更多背景信息：https://dirkjanm.io/ntlm-relaying-to-ad-certificate-services/ 安装 这些工具仅兼容 Python 3.5+。从 GitHub 克隆仓库，安装依赖项即可使用： git clone https://github.com/dirkjanm/PKINITtools pip3 install impacket minikerberos...
CVE-2026-0522
A local file inclusion vulnerability in the upload/download flow of the VertiGIS FM application allows authenticated attackers to read arbitrary files from the server by manipulating a file's path during its upload. When the file is subsequently downloaded, the file in the attacker controlled pat...
CVE-2026-0522: Externally Controlled Reference to a Resource in Another Sphere
A local file inclusion vulnerability in the upload/download flow of the VertiGIS FM application allows authenticated attackers to read arbitrary files from the server by manipulating a file's path during its upload. When the file is subsequently downloaded, the file in the attacker controlled pat...
EUVD-2023-51409
Malicious code in bioql PyPI...
CVE-2023-50916: Improper Limitation of a Pathname to a Restricted Directory
Kyocera Device Manager before 3.1.1213.0 allows NTLM credential exposure during UNC path authentication via a crafted change from a local path to a UNC path. It allows administrators to configure the backup location of the database used by the application. Attempting to change this location to a...
CVE-2023-47279
In Delta Electronics InfraSuite Device Master v.1.0.7, A vulnerability exists that allows an unauthenticated attacker to disclose user information through a single UDP packet, obtain plaintext credentials, or perform NTLM relaying...
Design/Logic Flaw
In Delta Electronics InfraSuite Device Master v.1.0.7, A vulnerability exists that allows an unauthenticated attacker to disclose user information through a single UDP packet, obtain plaintext credentials, or perform NTLM relaying...
CVE-2023-47279
Delta Electronics InfraSuite Device Master (version 1.0.7) is affected by CVE-2023-47279, a path traversal-related vulnerability permitting an unauthenticated attacker to disclose user information, obtain plaintext credentials, or perform NTLM relaying through a single UDP packet. This vulnerabil...
CVE-2023-47279 Delta Electronics InfraSuite Device Master Path Traversal
In Delta Electronics InfraSuite Device Master v.1.0.7, A vulnerability exists that allows an unauthenticated attacker to disclose user information through a single UDP packet, obtain plaintext credentials, or perform NTLM relaying...
CVE-2023-47279 Delta Electronics InfraSuite Device Master Path Traversal
In Delta Electronics InfraSuite Device Master v.1.0.7, A vulnerability exists that allows an unauthenticated attacker to disclose user information through a single UDP packet, obtain plaintext credentials, or perform NTLM relaying...
CVE-2023-47279: Improper Limitation of a Pathname to a Restricted Directory
In Delta Electronics InfraSuite Device Master v.1.0.7, A vulnerability exists that allows an unauthenticated attacker to disclose user information through a single UDP packet, obtain plaintext credentials, or perform NTLM relaying...
ADFSRelay - Proof Of Concept Utilities Developed To Research NTLM Relaying Attacks Targeting ADFS
This repository includes two utilities NTLMParse and ADFSRelay. NTLMParse is a utility for decoding base64-encoded NTLM messages and printing information about the underlying properties and fields within the message. Examining these NTLM messages is helpful when researching the behavior of a...
Lsarelayx - NTLM Relaying For Windows Made Easy
lsarelayx is system wide NTLM relay tool designed to relay incoming NTLM based authentication to the host it is running on. lsarelayx will relay any incoming authentication request which includes SMB. Since lsarelayx hooks into existing application authentication flows, the tool will also attempt...
Remote Potato – From Domain User to Enterprise Admin
NTLM Relaying is an well-known technique that was mainly used in security assessments in order to establish some sort of foothold on a server in… Continue reading - Remote Potato - From Domain User to Enterprise Admin...
Remote Potato – From Domain User to Enterprise Admin
NTLM Relaying is an well-known technique that was mainly used in security assessments in order to establish some sort of foothold on a server in… Continue reading - Remote Potato - From Domain User to Enterprise Admin...
