30 matches found
kerberoast
kerberoast Kerberoast es una serie de herramientas para atacar implementaciones de MS Kerberos. A continuación se presenta una breve descripción de lo que hace cada herramienta. Extraer todas las cuentas en uso como SPN usando herramientas integradas de MS PS C:\ setspn -T medin -Q / Solicitar...
RiskySPN
RiskySPNs RiskySPNs es una colección de scripts de PowerShell enfocados en detectar y abusar de cuentas asociadas con SPN Nombre de Principal de Servicio. Este módulo puede ayudar a los equipos azules a identificar SPN potencialmente riesgosos, así como a los equipos rojos a escalar privilegios...
Onboarding a Microsoft 365 Organization Fails with: service principal name is already present for the tenant
Challenge When signing in with a device code during onboarding of a Microsoft 365 organization in Veeam Data Cloud for Microsoft 365 , the following error occurs: AADSTS650051: Consent action for Application '' failed due to following error: The service principal name is already present for the...
Unity Linux 20.1060e / 20.1070e Security Update: samba (UTSA-2026-017353)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017353 advisory. The Samba AD DC includes checks when adding service principals names SPNs to an account to ensure that SPNs do not alias with those already in the database. Some of...
EUVD-2022-15499
Malicious code in bioql PyPI...
Gather Ticket Granting Service (TGS) tickets for User Service Principal Names (SPN)
This module will try to find Service Principal Names that are associated with normal user accounts. Since normal accounts' passwords tend to be shorter than machine accounts, and knowing that a TGS request will encrypt the ticket with the account the SPN is running under, this could be used for a...
The Samba AD DC includes checks when adding service principals names (SPNs) to an account to ensure that SPNs do not alias with those already in the database. Some of these checks are able to be bypassed if an account modification re-adds an SPN that was previously present on that account such as one added when a computer is joined to a domain. An attacker who has the ability to write to an account can exploit this to perform a denial-of-service attack by adding an SPN that matches an existing service. Additionally an attacker who can intercept traffic can impersonate existing services resulting in a loss of confidentiality and integrity.
...
CVE-2019-3870
...
Kerberos TGT/TGS Ticket Requester
This module requests TGT/TGS Kerberos tickets from the KDC Module Options msf use auxiliary/admin/kerberos/getticket msf auxiliarygetticket show actions ...actions... msf auxiliarygetticket set ACTION msf auxiliarygetticket show options ...show and set options... msf auxiliarygetticket run This...
CVE-2022-0336
The Samba AD DC includes checks when adding service principals names SPNs to an account to ensure that SPNs do not alias with those already in the database. Some of these checks are able to be bypassed if an account modification re-adds an SPN that was previously present on that account, such as...
ALPINE-CVE-2022-0336
The Samba AD DC includes checks when adding service principals names SPNs to an account to ensure that SPNs do not alias with those already in the database. Some of these checks are able to be bypassed if an account modification re-adds an SPN that was previously present on that account, such as...
AZL-37009 CVE-2022-0336 affecting package samba for versions less than 4.18.3-1
The Samba AD DC includes checks when adding service principals names SPNs to an account to ensure that SPNs do not alias with those already in the database. Some of these checks are able to be bypassed if an account modification re-adds an SPN that was previously present on that account, such as...
March 8, 2022—KB5011560 (Security-only update)
None None...
OESA-2022-1529 samba security update
Samba is a suite of programs for Linux and Unix to interoperate with Windows. Security Fixes: Checks in Samba AD DC to prevent alias SPNs may be bypassed, enabling users who can write to the account's servicePrincipalName attribute to impersonate the service.CVE-2022-0336...
AD Starter Scan - Kerberoasting
Binary data adsikerberoasting.nbin...
The vulnerability affects the implementation of the Kerberos authentication protocol for the isolated software environment AppContainer on Microsoft Windows operating systems. This vulnerability allows a perpetrator to bypass authentication checks.
The vulnerability of the Kerberos authentication protocol for the isolated software environment AppContainer on Microsoft Windows operating systems is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to bypass the network-based Kerberos authenticati...
PT-2021-3372 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: The issue is related to errors in security settings in the implementation of the Kerberos network authentication protocol for the AppContainer isolated software environment in...
Honeyroasting. How to detect Kerberoast breaches with honeypots
Introduction As we know one of the main issues facing defenders, especially in large environments, is protecting against threat actors after they gain a foothold in the environment. If an attacker lands on a domain-joined PC, the attack surface is massive, and it is vital to detect them as quickl...
Missing HOST SPN can cause workstation trust relationship error
User or admin is unable to login to a computer remotely using a domain account and sees this error: "The security database on the server does not have a computer account for this workstation trust relationship."...
DEBIAN-CVE-2019-3870
A vulnerability was found in Samba from version including 4.9 to versions before 4.9.6 and 4.10.2. During the creation of a new Samba AD DC, files are created in a private subdirectory of the install location. This directory is typically mode 0700, that is owner root only access. However in some...