16 matches found
GPOddity
GPOddity مشروع GPOddity، يهدف إلى أتمتة متجهات هجوم GPO عبر ترحيل NTLM وغير ذلك. لمزيد من التفاصيل حول الهجوم وعرض توضيحي لاستخدام الأداة، راجع المقالة المرتبطة المتاحة على: https://www.synacktiv.com/publications/gpoddity-exploiting-active-directory-gpos-through-ntlm-relaying-and-more التثبيت Pip...
PKINITtools
أدوات PKINIT يحتوي هذا المستودع على بعض الأدوات المساعدة للتعامل مع PKINIT والشهادات. تم بناء الأدوات على minikerberos و impacket. منشور مدونة مصاحب مع مزيد من السياق: https://dirkjanm.io/ntlm-relaying-to-ad-certificate-services/ التثبيت هذه الأدوات متوافقة فقط مع Python 3.5+. استنسخ المستودع من...
ADFSRelay
نظرة عامة يحتوي هذا المستودع على أداتين: NTLMParse و ADFSRelay. NTLMParse هي أداة لفك تشفير رسائل NTLM المشفرة بـ base64 وطباعة معلومات حول الخصائص والحقول الأساسية داخل الرسالة. فحص رسائل NTLM هذه مفيد عند البحث في سلوك تطبيق NTLM معين. ADFSRelay هي أداة إثبات مفهوم تم تطويرها أثناء البحث في جدو...
CVE-2026-0522
A local file inclusion vulnerability in the upload/download flow of the VertiGIS FM application allows authenticated attackers to read arbitrary files from the server by manipulating a file's path during its upload. When the file is subsequently downloaded, the file in the attacker controlled pat...
EUVD-2023-51409
Malicious code in bioql PyPI...
CVE-2023-47279
In Delta Electronics InfraSuite Device Master v.1.0.7, A vulnerability exists that allows an unauthenticated attacker to disclose user information through a single UDP packet, obtain plaintext credentials, or perform NTLM relaying...
Design/Logic Flaw
In Delta Electronics InfraSuite Device Master v.1.0.7, A vulnerability exists that allows an unauthenticated attacker to disclose user information through a single UDP packet, obtain plaintext credentials, or perform NTLM relaying...
CVE-2023-47279
Delta Electronics InfraSuite Device Master (version 1.0.7) is affected by CVE-2023-47279, a path traversal-related vulnerability permitting an unauthenticated attacker to disclose user information, obtain plaintext credentials, or perform NTLM relaying through a single UDP packet. This vulnerabil...
CVE-2023-47279 Delta Electronics InfraSuite Device Master Path Traversal
In Delta Electronics InfraSuite Device Master v.1.0.7, A vulnerability exists that allows an unauthenticated attacker to disclose user information through a single UDP packet, obtain plaintext credentials, or perform NTLM relaying...
CVE-2023-47279 Delta Electronics InfraSuite Device Master Path Traversal
In Delta Electronics InfraSuite Device Master v.1.0.7, A vulnerability exists that allows an unauthenticated attacker to disclose user information through a single UDP packet, obtain plaintext credentials, or perform NTLM relaying...
ADFSRelay - Proof Of Concept Utilities Developed To Research NTLM Relaying Attacks Targeting ADFS
This repository includes two utilities NTLMParse and ADFSRelay. NTLMParse is a utility for decoding base64-encoded NTLM messages and printing information about the underlying properties and fields within the message. Examining these NTLM messages is helpful when researching the behavior of a...
Lsarelayx - NTLM Relaying For Windows Made Easy
lsarelayx is system wide NTLM relay tool designed to relay incoming NTLM based authentication to the host it is running on. lsarelayx will relay any incoming authentication request which includes SMB. Since lsarelayx hooks into existing application authentication flows, the tool will also attempt...
Remote Potato – From Domain User to Enterprise Admin
NTLM Relaying is an well-known technique that was mainly used in security assessments in order to establish some sort of foothold on a server in… Continue reading - Remote Potato - From Domain User to Enterprise Admin...
Remote Potato – From Domain User to Enterprise Admin
NTLM Relaying is an well-known technique that was mainly used in security assessments in order to establish some sort of foothold on a server in… Continue reading - Remote Potato - From Domain User to Enterprise Admin...
