mimikatz-missing-manual

Mimikatz缺失手册 Windows身份、Kerberos和PKI研究的权威指南。 最初作为面向安全会议的高端培训课程内部开发，现在向公众发布。本文档中记录的许多技术深度和内部逻辑是在Mimikatz作者 Benjamin Delpy 的直接帮助和洞察下完善的。 关于本手册 本项目将多年的讲师授课材料转变为自定进度的深入手册。它不仅解释命令，还解释被操控的Windows协议背后的 为什么 和 如何 。 本手册面向： 红队 ：详细的命令参考和操作技巧。 蓝队 ：检测策略、事件日志特征和缓解指南。 安全研究人员 ：关于Windows安全机构（LSA）内部机制的高级课程。 您可以在...

CVE-2022-23648-POC

PoC para CVE-2022-23648 Esto es una prueba de concepto para el CVE-2022-23648 de @fel1x. Información de la divulgación aquí, información del CVE aquí y un blog con más información e ideas de mitigación aquí. El Containerfile tiene la información necesaria, y puedes cambiar el destino del VOLUME...

ejbca-pqc-lab

Laboratorio PQC Puro con EJBCA — Jerarquía PKI de Dos Niveles ML-DSA-65 Una implementación práctica de NIST FIPS 204 ML-DSA en una jerarquía PKI de dos niveles utilizando EJBCA Community Edition. 📖 Guía completa: Construyendo una PKI Post-Cuántica: Cómo firmé una CA Raíz y una CA Subordinada usan...

LAMMA-beta

LAMMA BETA 针对所有密码实现的安全评估框架 （一项由 SECURITY MONX 发起的开源项目） Lamma 框架文档（beta） root@kitploit: 文件名 : README 作者 : @ajithatti 组织 : Security Monx 版本 : 0.0.1 目的 : 介绍 Lamma 框架（beta） 目录 : root@kitploit: A. 许可证信息 B. Lamma 框架（beta）简介 C. 依赖项 D. 使用 LAMMA E. 特性 F. 说明 G. 贡献者 A. 许可证信息 root@kitploit: LAMMA...

CVE-2022-2414-Proof-Of-Concept

CVE-2022-2414-Proof-Of-Concept Se encontró una falla en pki-core. El acceso a entidades externas al analizar documentos XML puede provocar ataques de entidad externa XML XXE. Esta falla permite que un atacante remoto pueda recuperar el contenido de archivos arbitrarios mediante el envío de...

CVE-2026-76561

A flaw was found in Dogtag PKI, as used by FreeIPA's certificate authority component. The certificate profile import functionality does not fully validate uploaded profile content beyond the profile ID. An authenticated user with CA Administrator privileges can exploit Dogtag's...

EUVD-2026-72654

A flaw was found in Dogtag PKI, as used by FreeIPA's certificate authority component. The certificate profile import functionality does not fully validate uploaded profile content beyond the profile ID. An authenticated user with CA Administrator privileges can exploit Dogtag's...

CVE-2026-76561 Pki-core: dogtag/pki: certprofile-import allows code execution via unsanitized profile content (externalprocessconstraint)

A flaw was found in Dogtag PKI, as used by FreeIPA's certificate authority component. The certificate profile import functionality does not fully validate uploaded profile content beyond the profile ID. An authenticated user with CA Administrator privileges can exploit Dogtag's...

CVE-2026-76561

CVE-2026-76561 affects Dogtag PKI (pki-core), the certificate authority component used by FreeIPA . The certificate profile import functionality fails to fully validate uploaded profile content beyond the profile ID, allowing an authenticated user with CA Administrator privileges to exploit the E...

CVE-2026-76561

A flaw was found in Dogtag PKI, as used by FreeIPA's certificate authority component. The certificate profile import functionality does not fully validate uploaded profile content beyond the profile ID. An authenticated user with CA Administrator privileges can exploit Dogtag's...

PT-2026-87000

A flaw was found in Dogtag PKI, as used by FreeIPA's certificate authority component. The certificate profile import functionality does not fully validate uploaded profile content beyond the profile ID. An authenticated user with CA Administrator privileges can exploit Dogtag's...

OpenSC.tokend

OpenSC.tokend El controlador de tarjetas inteligentes de código abierto para OS X Un tokend hace que las claves y certificados de tu tarjeta inteligente aparezcan en Keychain Access.app y estén disponibles para aplicaciones como Safari o Chrome. OpenSC.tokend es la implementación de tokend de...

CVE-2026-53682

An unauthenticated client can query the Security Domain hosts inventory via GET /ca/rest/securityDomain/hosts and receive a structured response enumerating internal PKI/CA hosts and roles security domain topology and participating subsystems, without requiring a principal, client certificate, or...

CVE-2026-53682

Dogtag PKI (pki-core) exposes the Security Domain hosts inventory via the REST endpoint GET /ca/rest/securityDomain/hosts without requiring authentication (no principal, client certificate, or session). An unauthenticated client can receive a structured response enumerating internal PKI/CA hosts ...

CVE-2026-53682 Pki-core: dogtag-pki: unauthenticated dogtag ca rest api exposes security domain hosts

An unauthenticated client can query the Security Domain hosts inventory via GET /ca/rest/securityDomain/hosts and receive a structured response enumerating internal PKI/CA hosts and roles security domain topology and participating subsystems, without requiring a principal, client certificate, or...

EUVD-2026-69056

An unauthenticated client can query the Security Domain hosts inventory via GET /ca/rest/securityDomain/hosts and receive a structured response enumerating internal PKI/CA hosts and roles security domain topology and participating subsystems, without requiring a principal, client certificate, or...

CVE-2026-11873 Pki-core: dogtag-pki: empty request to dogtag /ca/rest/certrequests causes http 500, java exception, and stacktrace disclosure

An Apache-proxied Dogtag CA REST endpoint exposed by IdM POST /ca/rest/certrequests returns HTTP 500 with internal Java stack traces for unauthenticated malformed requests. The same unauthenticated error path emits large multi-line stack traces into the CA debug log, creating a log-amplification...

CVE-2026-11873

Red Hat IdM (Identity Management) exposes an Apache-proxied Dogtag CA REST endpoint (POST /ca/rest/certrequests ) that, upon receiving an unauthenticated malformed or empty request, returns an HTTP 500 response containing internal Java stack traces . The same unauthenticated error path writes lar...

Linux Distros Unpatched Vulnerability : CVE-2026-53682

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An unauthenticated client can query the Security Domain hosts inventory via GET /ca/rest/securityDomain/hosts and receive a structured response enumerating...

CVE-2026-55166 Lemur: any SSO-authenticated user achieves AWS IAM compromise and permanent PKI key access via ACME acme_url SSRF and creator-equality IDOR

Lemur manages TLS certificate creation. Prior to 1.9.2, authenticated users could influence an ACME authority acmeurl without an effective server-side destination restriction and trigger AcmeHandler.setupacmeclient to make backend requests. An attacker could target cloud instance metadata or...