Lucene search
+L

10 matches found

Kitploit
Kitploit
added 2026/09/16 6:04 a.m.12 views

noPac

About Exploiting CVE-2021-42278 and CVE-2021-42287 to impersonate DA from standard domain user Changed from sam-the-admin. Usage root@kitploit: SAM THE ADMIN CVE-2021-42278 + CVE-2021-42287 chain positional arguments: domain/username:password Account used to authenticate to DC. options: -h, --hel...

8.8CVSS7.4AI score0.7717EPSS
SaveExploits10References1
Kitploit
Kitploit
added 2026/09/16 2:08 a.m.9 views

noPac

noPac Exploiting CVE-2021-42278 and CVE-2021-42287 The original noPac project may have some issues in implementation, which prevented it from working locally, so reference was made to the sam-the-admin project for modifications. Usage root@kitploit: pip3 install -r requirements.txt GetShell pytho...

8.8CVSS7.7AI score0.7717EPSS
SaveExploits10References2
Kitploit
Kitploit
added 2026/09/16 12:55 a.m.12 views

PIGADVulnScanner

ADVulnScanner Detect common one-shot vulnerabilities in the domain, including: NoPac, ZeroLogon, CVE-2022-26923, PrintNightMare...

9CVSS8.4AI score0.835EPSS
SaveExploits8
Kitploit
Kitploit
added 2026/09/15 9:30 p.m.8 views

Invoke-noPac

Invoke-noPac The .Net assembly is based on my fork https://github.com/ricardojba/noPac that has a few code changes to improve upon the original. PowerSharpPack style .Net Assembly loader for the CVE-2021-42287 - CVE-2021-42278 Scanner & Exploit noPac. Usage: root@kitploit: Set-PSReadlineOption...

8.8CVSS7.5AI score0.7717EPSS
SaveExploits10References3
Kitploit
Kitploit
added 2026/09/15 6:36 p.m.6 views

noPac-detection

About Detection script for CVE-2021-42278 and CVE-2021-42287 Usage root@kitploit: The detection script uses the domain account credentials to determine the possibility of the vulnerabilities. usage: noPac-detection.py -h -debug -dc-ip -targetUser credentials optional arguments: -h, --help show th...

8.8CVSS7.3AI score0.7717EPSS
SaveExploits10
Kitploit
Kitploit
added 2026/09/15 5:53 p.m.14 views

noPac

noPac CVE-2021-42287/CVE-2021-42278 Scanner & Exploiter. Yet another low effort domain user to domain admin exploit. If a Domain Controller is vulnerable it will return a TGT without a PAC, all eyes on small size tickets. Mitigation Patch your Domain Controllers! Credits Charlie Clark for his...

8.8CVSS7.5AI score0.7717EPSS
SaveExploits10
Kitploit
Kitploit
added 2026/09/15 12:08 p.m.12 views

noPac

noPac This project originated from studying the principle of noPac, with some modifications based on the cube0x0 project. Personal understanding comments have been added to the source code. Removed the Scan functionality, as I found it to be of limited use. Added a check for the MachineAccountQuo...

6.1AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/14 7:09 p.m.14 views

noPac

About NoPac exploit, exploiting some old vulnerabilities CVE-2021-42278 and CVE-2021-42287 to impersonate a domain admin from a standard user. No more annoying dependencies, just a single binary holy shit i love Go, Python could NEVER. The -shell flag just spawns impacket-smbexec. You can also ju...

7.3AI score
SaveExploits0
GithubExploit
GithubExploit
added 2023/10/17 6:29 a.m.83 views

Exploit for Improper Certificate Validation in Microsoft

ADVulnScanner Detects common vulnerabilities in...

9CVSS7.5AI score0.835EPSS
SaveExploits8
GithubExploit
GithubExploit
added 2021/12/13 3:24 p.m.152 views

Exploit for CVE-2021-42278

noPac Exploiting CVE-2021-42278 and CVE-2021-42287 The origi...

8.8CVSS7.1AI score0.7717EPSS
SaveExploits10
Rows per page
Query Builder