AddUser-SAMR

AddUser-SAMR SAMR API를 사용하여 로컬 관리자를 생성합니다. 이는 net.exe, PowerShell의 New-LocalUser 또는 NetUserAdd API보다 낮은 수준에서 작동합니다. 관리자 권한이 필요하며, 사용자가 이미 존재하는 경우 그룹에 추가되지만 비밀번호는 업데이트되지 않습니다. 이 저장소에는 4가지 구현체C, Python, Rust, Crystal가 있지만, @M0nster3의 C++ 버전이나 @AgeloVito의 BOF 파일과 같은 다른 언어의 공개 버전도 있습니다. 이 코드는 로컬 계정을...

ForgottenButNotGone

잊혔지만 사라지지 않은 이 저장소에는 Black Hat USA 2026과 DEF CON 34에서 발표된 "잊혔지만 사라지지 않은: 레거시 Linux 서비스의 인증 없는 RCE 및 LPE" 프레젠테이션에서 소개된 취약점들에 대한 개념 증명PoC 스크립트가 포함되어 있습니다. CVE-2026-28372 TelnetD의 로컬 권한 상승: 권한이 없는 공격자는 TelnetD의 환경 변수 기능을 악용하여 루트 권한 셸을 획득할 수 있습니다. 설계상, 그리고 해당 RFC에 따르면 Telnet 프로토콜은 클라이언트가 셸 세션에 대한 환경...

rbcd-attack

Abusing Kerberos Resource-Based Constrained Delegation TL;DR This repo is about a practical attack against Kerberos Resource-Based Constrained Delegation in a Windows Active Directory Domain. The difference from other common implementations is that we are launching the attack from outside of the...

adnullenum

adnullenum 一个针对匿名 （null）会话的单次遍历 Active Directory 枚举器， 使用 \samr 和 \lsarpc 命名管道。无需凭据。 它做的事情经典工具都能做。它所做的就是把所有信息集中在 一次运行 中收集，并清晰地呈现结果。在一次渗透中，你没有域账户就进入， 通过 DNS 找到 DC，然后想要获得全貌——账户、 每个用户的详细信息、组、策略以及 LSA/DNS 相关信息——而不必拼凑 rpcclient 会话或几个独立的脚本，然后手动解析它们的 stdout。这个工具为你完成这一遍 并写出结构化、可复用的输出： 一条命令 涵盖域信息、策略、RID...

Rocky Linux 8 [CIQ] Security Update: ctdb / ctdb-debuginfo / libnetapi / libnetapi-debuginfo / etc Multiple Vulnerabilities (crlsa-2026_22644)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202622644 advisory. samba: group policy certificate enrollment uses http:// without validation CVE-2026-3012 samba: Samba: Remote Code Execution in printing subsystem via...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.15.68 bug fix and security update

Red Hat OpenShift Container Platform release 4.15.68 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.15. Red Hat Product Security has rated this update as having a...

OPENSUSE-SU-2026:21540-1 Security update for samba

This update for samba fixes the following issues: Update to 4.22.11. Security issues fixed: - CVE-2026-1933: missing access check on reparse point operations allows unauthorized users to modify the user.SmbReparse xattr bsc1261188. - CVE-2026-2340: WORM vfs module does not block directory...

Important: Red Hat Security Advisory: samba security update

An update for samba is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability...

RHEL 9 : samba (RHSA-2026:28054)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:28054 advisory. Samba is an open-source implementation of the Server Message Block SMB protocol and the related Common Internet File System CIFS protocol,...

RHEL 10 : samba (RHSA-2026:28055)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:28055 advisory. Samba is an open-source implementation of the Server Message Block SMB protocol and the related Common Internet File System CIFS protocol,...

RHEL 8 : samba (RHSA-2026:28057)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:28057 advisory. Samba is an open-source implementation of the Server Message Block SMB protocol and the related Common Internet File System CIFS protocol,...

RHEL 8 : samba (RHSA-2026:28056)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:28056 advisory. Samba is an open-source implementation of the Server Message Block SMB protocol and the related Common Internet File System CIFS protocol,...

RHEL 7 : samba (RHSA-2026:28132)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:28132 advisory. Samba is an open-source implementation of the Server Message Block SMB protocol and the related Common Internet File System CIFS protocol,...

Important: Red Hat Security Advisory: samba security update

An update for samba is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

RHEL 9 : samba (RHSA-2026:25979)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:25979 advisory. Samba is an open-source implementation of the Server Message Block SMB protocol and the related Common Internet File System CIFS protocol,...

RLSA-2026:25049 Critical: samba security update

Samba is an open-source implementation of the Server Message Block SMB protocol and the related Common Internet File System CIFS protocol, which allow PC-compatible machines to share files, printers, and various information. Security Fixes: samba: Missing access check on reparse point operations...

RLSA-2026:22963 Critical: samba security update

Samba is an open-source implementation of the Server Message Block SMB protocol and the related Common Internet File System CIFS protocol, which allow PC-compatible machines to share files, printers, and various information. Security Fixes: samba: Missing access check on reparse point operations...

RockyLinux 10 : samba (RLSA-2026:22963)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:22963 advisory. samba: Missing access check on reparse point operations CVE-2026-1933 samba: vfsworm does not block directory modification CVE-2026-2340 samba: group...

USN-8306-2 samba vulnerabilities

USN-8306-1 fixed vulnerabilities in Samba. This update provides the corresponding updates for CVE-2026-3238, CVE-2026-4408, and CVE-2026-4480 in Ubuntu 20.04 LTS. Original advisory details: Asim Viladi Oglu Manizada discovered that Samba incorrectly handled access checks on reparse point...

Critical: Red Hat Security Advisory: samba security update

An update for samba is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...