zBang

zBang 是一款特殊的风险评估工具，能够检测扫描网络中的潜在特权账户威胁。 组织及红队成员可利用 zBang 识别潜在攻击向量，提升网络安全态势。可通过图形界面或查看原始输出文件分析结果。 关于 zBang 的更多详情，请参阅 @Hechtov 撰写的博文《Big zBang Theory》： https://www.cyberark.com/threat-research-blog/the-big-zbang-theory-a-new-open-source-tool/ 该工具由五个不同的扫描模块组成： 1. ACLight 扫描 —...

WindowsPatchDetector

实验性 Windows .text 段补丁检测器 ====================== 实验性：Windows .text 段比较 - 磁盘与内存 原始想法 在阅读了 Skeleton Key 恶意软件（http://www.secureworks.com/cyber-threat-intelligence/threats/skeleton-key-malware-analysis/）的相关文章后，开发一个小工具，将磁盘上 .exe 和 .dll 文件中的 .text 段与它们在 RAM 中的对应部分进行比较，以检测补丁。 结果 整体上适用于 32 位和 64 位二进制文件...

Lock-Picking-Robot

🔑 Unlocked 🔑 はじめに 背景 オープンソースの鍵開けロボットです。基本的に、多くのマスターキー（最も一般的な例はTSA 007で、これは問題があります）が使われています。1つの鍵で多くの異なるロックを開けられること、特にロックの所有者がその存在を知らない（またはAliExpressで1ポンドで購入できる）ことは、重大なセキュリティ問題です。しかし、TSAや鍵屋などは特定の状況でロックを開ける必要があり、彼らにとってロックを開けやすくすると、誰にとっても開けやすくなってしまいます。 🔒 ➡️ 🔑🤖 ➡️ 🔓 というわけで、鍵開けロボット!!!...

NewStart CGSL MAIN 6.06 : chrony Multiple Vulnerabilities (NS-SA-2025-0212)

The remote NewStart CGSL host, running version MAIN 6.06, has chrony packages installed that are affected by multiple vulnerabilities: - chrony before 1.31.2 and 2.x before 2.2.1 do not verify peer associations of symmetric keys when authenticating packets, which might allow remote attackers to...

Prompt Injection Flaw in Vanna AI Exposes Databases to RCE Attacks

Cybersecurity researchers have disclosed a high-severity security flaw in the Vanna.AI library that could be exploited to achieve remote code execution vulnerability via prompt injection techniques. The vulnerability, tracked as CVE-2024-5565 CVSS score: 8.1, relates to a case of prompt injection...

SUSE CVE-2007-6755

The NIST SP 800-90A default statement of the Dual Elliptic Curve Deterministic Random Bit Generation DualECDRBG algorithm contains point Q constants with a possible relationship to certain "skeleton key" values, which might allow context-dependent attackers to defeat cryptographic protection...

SUSE CVE-2016-1567

chrony before 1.31.2 and 2.x before 2.2.1 do not verify peer associations of symmetric keys when authenticating packets, which might allow remote attackers to conduct impersonation attacks via an arbitrary trusted key, aka a "skeleton key."...

Chinese Hackers Have Pillaged Taiwan's Semiconductor Industry

A campaign called Operation Skeleton Key has stolen source code, software development kits, chip designs, and more...

Huawei EulerOS: Security Advisory for chrony (EulerOS-SA-2017-1158)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP2 : chrony (EulerOS-SA-2017-1158)

According to the version of the chrony package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - chrony before 1.31.2 and 2.x before 2.2.1 do not verify peer associations of symmetric keys when authenticating packets, which might allow remote...

CVE-2016-1567

chrony before 1.31.2 and 2.x before 2.2.1 do not verify peer associations of symmetric keys when authenticating packets, which might allow remote attackers to conduct impersonation attacks via an arbitrary trusted key, aka a "skeleton key."...

DEBIAN-CVE-2016-1567

chrony before 1.31.2 and 2.x before 2.2.1 do not verify peer associations of symmetric keys when authenticating packets, which might allow remote attackers to conduct impersonation attacks via an arbitrary trusted key, aka a "skeleton key."...

DEBIAN-CVE-2015-7974

NTP 4.x before 4.2.8p6 and 4.3.x before 4.3.90 do not verify peer associations of symmetric keys when authenticating packets, which might allow remote attackers to conduct impersonation attacks via an arbitrary trusted key, aka a "skeleton key."...

CVE-2015-7974

NTP 4.x before 4.2.8p6 and 4.3.x before 4.3.90 do not verify peer associations of symmetric keys when authenticating packets, which might allow remote attackers to conduct impersonation attacks via an arbitrary trusted key, aka a "skeleton key."...

UBUNTU-CVE-2016-1567

chrony before 1.31.2 and 2.x before 2.2.1 do not verify peer associations of symmetric keys when authenticating packets, which might allow remote attackers to conduct impersonation attacks via an arbitrary trusted key, aka a "skeleton key."...

CVE-2016-1567

CVE-2016-1567 affects chrony before 1.31.2 and 2.x before 2.2.1, where peer associations of symmetric keys are not verified when authenticating packets. This can enable remote impersonation attacks via an arbitrary trusted key (skeleton key). Public sources in the initial document describe the af...

CVE-2015-7974

NTP 4.x before 4.2.8p6 and 4.3.x before 4.3.90 do not verify peer associations of symmetric keys when authenticating packets, which might allow remote attackers to conduct impersonation attacks via an arbitrary trusted key, aka a "skeleton key."...

UBUNTU-CVE-2015-7974

NTP 4.x before 4.2.8p6 and 4.3.x before 4.3.90 do not verify peer associations of symmetric keys when authenticating packets, which might allow remote attackers to conduct impersonation attacks via an arbitrary trusted key, aka a "skeleton key."...

Skeleton Key Malware Bypasses Active Directory Authentication

Enterprise Active Directory administrators need to be on the lookout for anomalous privileged user activity after the discovery of malware capable of bypassing single-factor authentication on AD that was used as part of a larger cyberespionage campaign against a global company based in London...

CVE-2007-6755

The NIST SP 800-90A default statement of the Dual Elliptic Curve Deterministic Random Bit Generation DualECDRBG algorithm contains point Q constants with a possible relationship to certain "skeleton key" values, which might allow context-dependent attackers to defeat cryptographic protection...