13 matches found
krbrelayx
Krbrelayx - Kerberos 댴ë ě´ ë° ëŹ´ě í ěě ë¨ěŠ ë꾏 í¤í¸ Kerberos뼟 ë¨ěŠí기 ěí ë꾏 í¤í¸ě ëë¤. ěëíë ¤ëŠ´ impacket, ldap3 ë° dnspythoně´ íěíŠëë¤. ěľě ë˛ě ě ěŹěŠíë ¤ëŠ´ gitěě ě§ě impacketě ě¤ěšíë ę˛ě´ ě˘ěľëë¤. ě´ ë꾏 í¤í¸ě ëí ěě¸í ë´ěŠě ě ë¸ëĄęˇ¸ https://dirkjanm.io/krbrelayx-unconstrained-delegation-abuse-toolkit/ěě íě¸í ě ěěľëë¤. Kerberos 댴ë ě´ě ëí ě ëł´ë íě ë¸ëĄęˇ¸...
blankspace
Blank Space Blank Spaceë CVE-2021-43893, EFSRPC ěě íěź ě ëĄë ęśí ěěšě ëí James Forshawě ě본 ę°ë ěŚëŞ ě 댏íŠí ë§í ę˛ě ëë¤. Blank Spaceë CVE-2021-43893ě ëí í¨ěšę° ě ěŠëě§ ěě, ě í ěë ěěunconstrained delegationě ěŹěŠíë ě겊 í¸ě¤í¸ě ěě íěźě ěěąí ě ěěľëë¤. íěź ěěąě ě겊 ěŹěŠěě ęśíěźëĄ ěíëëŻëĄ ě˝ë ě¤íě ë¤ě ěśě¸Ąě ę°ęšě§ë§ íě¤í ę°ëĽěąě ěěľëë¤. Blank Spaceë...
Metasploit Wrap-Up 02/06/2026
Google Summer of Code 2026 Our very own Jack Heysel has added some documentation which outlines the Metasploit Framework project ideas for GSoC 2026. For anyone interested in applying please see GSoC-How-To-Apply documentation, or reach out on slack to any of the following GSoC mentors on Slack v...
Metasploit Weekly Wrap-Up 08/02/2024
Metasploit goes to Hacker Summer Camp Next week, Metasploit will have demos at both Black Hat and DEF CON where the latest functionality from this year will be presented. The Black Hat demo will be on Thursday the 8th from 10:10 to 11:25 and the DEF CON demo will be on Saturday the 10th from 12:0...
msLDAPDump - LDAP Enumeration Tool
msLDAPDump simplifies LDAP enumeration in a domain environment by wrapping the lpap3 library from Python in an easy-to-use interface. Like most of my tools, this one works best on Windows. If using Unix, the tool will not resolve hostnames that are not accessible via eth0 currently. Binding...
Unconstrained Delegation
Microsoft to support scenarios where users authenticate via Kerberos to one system and information needs to be updated on another system implemented unconstrained delegation. This⌠Continue reading - Unconstrained Delegation...
AD Starter Scan - Unconstrained delegation
Binary data adsikerberosdeleg.nbin...
July 9, 2019âKB4507435 (OS Build 17134.885)
None None...
July 9, 2019âKB4507462 (Monthly Rollup)
None None...
July 9, 2019âKB4507461 (Security-only update)
None None...
July 9, 2019âKB4507452 (Monthly Rollup)
None None...
July 9, 2019âKB4507464 (Security-only update)
None None...
Guidance to mitigate unconstrained delegation vulnerabilities
Executive Summary Active Directory Forest trusts provide a secure way for resources in a forest to trust identities from another forest. This trust is directional; a trusted forest can authenticate its users to the trusting forest without allowing the reverse. A feature, Enforcement for forest...