noPac-detection

关于 CVE-2021-42278和CVE-2021-42287的检测脚本 使用 root@kitploit: The detection script uses the domain account credentials to determine the possibility of the vulnerabilities. usage: noPac-detection.py -h -debug -dc-ip -targetUser credentials optional arguments: -h, --help show this help message and exit...

NoPacScan

NoPacScan NoPacScan 是一个 CVE-2021-42287/CVE-2021-42278 扫描器，它能比原始脚本扫描到更多的域控制器，并且更加精确。它通过 DNS 查询 msdcs.aaa.com 来扫描 DC，这比 LDAP 和 SAMR 更好，并且它会自动扫描我们找到的所有 DC。如果你使用 LDAP 或 SAMR，可能会漏掉一些已从主 DC 中移除的 DC。为了更加精确，它会扫描 PAC 中类型等于 0x10 的部分，这是微软针对此漏洞的主要补丁位置。...

Linux Distros Unpatched Vulnerability : CVE-2016-3763

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/PacProxySelector.java in the Proxy Auto-Config PAC feature in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 do...

Linux Distros Unpatched Vulnerability : CVE-2018-17191

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Apache NetBeans incubating 9.0 NetBeans Proxy Auto-Configuration PAC interpretation is vulnerable for remote command execution RCE. Using the nashorn script...

CVE-2018-17191

Apache NetBeans incubating 9.0 NetBeans Proxy Auto-Configuration PAC interpretation is vulnerable for remote command execution RCE. Using the nashorn script engine the environment of the javascript execution for the Proxy Auto-Configuration leaks privileged objects, that can be used to circumvent...