51 matches found
krbrelayx
Krbrelayx - Kit de herramientas de retransmisión Kerberos y abuso de delegación no restringida Kit de herramientas para abusar de Kerberos. Requiere impacket, ldap3 y dnspython para funcionar. Se recomienda instalar impacket directamente desde git para tener la última versión disponible. Más...
ActiveDirectoryEnumeration
ADE - ActiveDirectoryEnum python -m ade usage: ade -h --dc DC -o OUTFILE -u USER -s -smb -kp -bh -spn -sysvol --all --no-creds --dry-run --exploit EXPLOIT / | / / / \ / / / / / /| |/ / / / | / / / / / / / / / / / / / / / / / / / / / / \ / / // // /| |/ / / // / / / / / // /...
getSPNless
getSPNless 获取 Kerberos 服务票据的 Python 工具，使用无 SPN 技术。基于 利用普通用户账户进行 RBCD 攻击。 该工具使用 impacket 项目。 安装 这些工具仅兼容 Python 3.5 以上版本。从 GitHub 克隆仓库，安装依赖项后即可使用： git clone https://github.com/jarnovandenbrink/getSPNless.git cd getSPNless python3 -m pip install . 建议使用虚拟环境（virtualenv）。 用法 python3 getSPNless.py -spn...
kerberoast
🚩 赞助者 如果你喜欢这个项目，请在 GitHub 上赞助它！ 赞助者 kerberoast Kerberos 攻击工具包 —纯 Python— 安装 pip3 install kerberoast 前提条件 Python 3.6 参见 requirements.txt 快速开始 重要：接受的 LDAP 和 Kerberos 目标 URL 格式如下 : +://:@/?= : +://:@/?= 步骤 —使用 SSPI—： kerberoast auto 步骤 —不使用 SSPI—： 1. 通过 LDAP 查找易受攻击的用户 kerberoast ldap all -o ldapenum...
targetedKerberoast
targetedKerberoast targetedKerberoast 是一个 Python 脚本，与许多其他工具（例如 GetUserSPNs.py）类似，可以打印设置了 SPN 的用户账户的“kerberoast”哈希值。 该工具带来以下附加功能：对于每个没有 SPN 的用户，它会尝试设置一个 SPN（滥用 servicePrincipalName 属性的写入权限），打印“kerberoast”哈希值，然后删除为此操作设置的临时 SPN。这被称为 Targeted Kerberoasting。 该工具可用于域中的所有用户，或提供列表中的用户，或通过 CLI 提供单个用户。...
detect_CVE-2026-25177
detect-CVE-2026-25177 Escáner seguro para entornos de producción que detecta la explotación de CVE-2026-25177 — la vulnerabilidad de colisión Unicode en SPN de Active Directory CVSS 8.8. Esta vulnerabilidad permite que cualquier usuario autenticado con permisos de escritura de SPN escale...
No Privileges, No Lockout, No Trace: Kerberoasting with SPN Misconfigurations
No Privileges, No Lockout, No Trace: Kerberoasting with SPN Misconfigurations By Maulik Maheta and Henry Bernabe · August 27, 2026 Executive Summary Active Directory misconfigurations are vulnerabilities that attackers can exploit before defenders notice them. This blog exposes a stealthier...
K08602542: SAMBA vulnerability CVE-2022-0336
Security Advisory Description The Samba AD DC includes checks when adding service principals names SPNs to an account to ensure that SPNs do not alias with those already in the database. Some of these checks are able to be bypassed if an account modification re-adds an SPN that was previously...
CVE-2022-0336
The Samba AD DC includes checks when adding service principals names SPNs to an account to ensure that SPNs do not alias with those already in the database. Some of these checks are able to be bypassed if an account modification re-adds an SPN that was previously present on that account, such as...
DEBIAN-CVE-2022-0336
The Samba AD DC includes checks when adding service principals names SPNs to an account to ensure that SPNs do not alias with those already in the database. Some of these checks are able to be bypassed if an account modification re-adds an SPN that was previously present on that account, such as...
CVE-2022-0336
Samba AD DC CVE-2022-0336: SPN checks can be bypassed when re-adding a previously present SPN, enabling a write-enabled attacker to impersonate services or cause DoS by matching an existing SPN. Some advisories note no patch for certain releases (e.g., Samba 4.12.5-7), while others indicate an up...
CVE-2022-0336
The Samba AD DC includes checks when adding service principals names SPNs to an account to ensure that SPNs do not alias with those already in the database. Some of these checks are able to be bypassed if an account modification re-adds an SPN that was previously present on that account, such as...
CVE-2022-0336
The Samba AD DC includes checks when adding service principals names SPNs to an account to ensure that SPNs do not alias with those already in the database. Some of these checks are able to be bypassed if an account modification re-adds an SPN that was previously present on that account, such as...
CVE-2022-0336: Incorrect Default Permissions
The Samba AD DC includes checks when adding service principals names SPNs to an account to ensure that SPNs do not alias with those already in the database. Some of these checks are able to be bypassed if an account modification re-adds an SPN that was previously present on that account, such as...
CVE-2022-0336
The Samba AD DC includes checks when adding service principals names SPNs to an account to ensure that SPNs do not alias with those already in the database. Some of these checks are able to be bypassed if an account modification re-adds an SPN that was previously present on that account, such as...
CVE-2022-0336
The Samba AD DC includes checks when adding service principals names SPNs to an account to ensure that SPNs do not alias with those already in the database. Some of these checks are able to be bypassed if an account modification re-adds an SPN that was previously present on that account, such as...
CVE-2022-32743
A flaw was found in samba that validates the domain name system's host name. This issue links a trailing $ to objectclass=computer, which helps avoid the creation of SPN values that collide with other, possibly privileged hosts...
EulerOS 2.0 SP10 : samba (EulerOS-SA-2022-1666)
According to the versions of the samba packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The Samba vfsfruit module uses extended file attributes EA, xattr to provide ...enhanced compatibility with Apple SMB clients and interoperabilit...
March 8, 2022—KB5011495 (OS Build 14393.5006) - EXPIRED
None None...
Updated samba packages fix security vulnerability
For CVE-2021-20316 and CVE-2021-44141, there is only a workaround and mitigation: All versions of Samba prior to 4.15.5 are vulnerable to a malicious client using a server symlink to determine if a file or directory exists in an area of the server file system not exported under the share...