ctf

CTF 相关材料 目录 挑战内容见下表。 描述| 活动/游戏| 解决方案 ---|---|--- 堆栈攻击| ---| --- 黑箱| 第1关| 一个带有“登录”功能的可执行文件，密码以明文形式存储在内存中。 黑箱| 第2关| 一个设置了 setuid 为 root 的可执行文件。存在 return-to-libc 漏洞。...

mimipenguin

MimiPenguin 2.0 一种用于从当前 Linux 桌面用户转储登录密码的工具。改编自流行 Windows 工具 mimikatz 背后的思路。此漏洞被分配了 CVE-2018-20781 https://vulners.com/cve/CVE-2018-20781。有趣的是，它在 GNOME Keyring 3.27.2 之后仍未修复，并且在 3.28.0.2-1ubuntu1.18.04.1 中仍然有效。 详细信息 通过转储进程并提取包含明文密码概率较高的行，利用内存中的明文凭据。将尝试通过检查 /etc/shadow...

CVE-2018-14847

WinboxExploit 这是针对严重 WinBox 漏洞（CVE-2018-14847）的概念验证，该漏洞允许任意读取明文密码的文件。 博客文章 https://n0p.me/winbox-bug-dissection/ 需求 Python 3+ 此脚本不会在 Python 2.x 或更低版本上运行。 使用方法 该脚本通过命令行使用简单的参数即可运行。 WinBox TCP/IP 利用漏洞并读取密码。 root@kitploit: python3 WinboxExploit.py PORT 示例： root@kitploit: $ python3 WinboxExploit.py...

PT-2026-83376

Name of the Vulnerable Software and Affected Versions MariaDB Connector/R2DBC versions prior to 1.4.1 Description The driver does not require a secure transport before using clear-text password authentication plugins. A hostile or man-in-the-middle MariaDB server can send an AuthSwitchRequest...

CVE-2024-39575

updatediskpsubaseline.sh requires password in plain text...

CVE-2024-39575

Technical details are not publicly available in the provided documents; monitor for updates.

CVE-2026-9751

The ldapQueryPassword parameter, when set through the runtime setParameter command, will log the new password to the mongod.log file in plain text...

EUVD-2021-8780

Dell VxRail versions before 7.0.200 contain a Plain-text Password Storage Vulnerability in VxRail Manager. A sys-admin user may exploit this vulnerability, leading to the disclosure of certain user credentials. The attacker may be able to use the exposed credentials to access the vulnerable...

PT-2026-5696

Name of the Vulnerable Software and Affected Versions Brocade SANnav versions prior to 2.4.0b Description Brocade SANnav before version 2.4.0b improperly handles logging of the Brocade Fabric OS Switch admin password. The password is logged in clear text within the SANnav support save logs...

CVE-2019-11664

Clear text password in browser in Micro Focus Service Manager product versions 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51, 9.52, 9.60, 9.61, 9.62. The vulnerability could be exploited to allow sensitive data exposure...

CVE-2024-41687

This vulnerability exists in SyroTech SY-GPON-1110-WDONT Router due to transmission of password in plain text. A remote attacker could exploit this vulnerability by intercepting transmission within an HTTP session on the vulnerable system. Successful exploitation of this vulnerability could allow...

CVE-2019-16210

Brocade SANnav versions before v2.0, logs plain text database connection password while triggering support save...

CVE-2024-42197 HCL Workload Scheduler is vulnerable to plain text storage of a password

HCL Workload Scheduler stores user credentials in plain text which can be read by a local user...

CVE-2024-42197

The CVE-2024-42197 entry concerns HCL Workload Scheduler storing user credentials in plain text, allowing a local non-privileged user to read them. The available documents consistently describe the issue as cleartext credential storage without details on affected versions or root cause beyond the...

EUVD-2014-8364

Malware in sbrugna...

EUVD-2019-13376

Malware in sbrugna...

EUVD-2020-24660

Malware in sbrugna...

EUVD-2018-12200

Malware in sbrugna...

EUVD-2020-21869

Malware in sbrugna...

EUVD-2020-18824

Malware in sbrugna...