blankspace

Blank Space Blank Space é um refatoramento do prova de conceito original de James Forshaw para CVE-2021-43893, escalonamento de privilégio por upload arbitrário de arquivos via EFSRPC. O Blank Space pode criar arquivos arbitrários em um host remoto que esteja usando delegação não restrita, caso e...

krbrelayx

Krbrelayx – Toolkit für Kerberos-Relaying und Missbrauch uneingeschränkter Delegierung Toolkit für den Missbrauch von Kerberos. Benötigt impacket, ldap3 und dnspython, um zu funktionieren. Es wird empfohlen, impacket direkt von git zu installieren, um die neueste Version zu erhalten. Weitere...

Metasploit Wrap-Up 02/06/2026

Google Summer of Code 2026 Our very own Jack Heysel has added some documentation which outlines the Metasploit Framework project ideas for GSoC 2026. For anyone interested in applying please see GSoC-How-To-Apply documentation, or reach out on slack to any of the following GSoC mentors on Slack v...

Metasploit Weekly Wrap-Up 08/02/2024

Metasploit goes to Hacker Summer Camp Next week, Metasploit will have demos at both Black Hat and DEF CON where the latest functionality from this year will be presented. The Black Hat demo will be on Thursday the 8th from 10:10 to 11:25 and the DEF CON demo will be on Saturday the 10th from 12:0...

msLDAPDump - LDAP Enumeration Tool

msLDAPDump simplifies LDAP enumeration in a domain environment by wrapping the lpap3 library from Python in an easy-to-use interface. Like most of my tools, this one works best on Windows. If using Unix, the tool will not resolve hostnames that are not accessible via eth0 currently. Binding...

Unconstrained Delegation

Microsoft to support scenarios where users authenticate via Kerberos to one system and information needs to be updated on another system implemented unconstrained delegation. This… Continue reading - Unconstrained Delegation...

AD Starter Scan - Unconstrained delegation

Binary data adsikerberosdeleg.nbin...

July 9, 2019—KB4507435 (OS Build 17134.885)

None None...

July 9, 2019—KB4507462 (Monthly Rollup)

None None...

July 9, 2019—KB4507461 (Security-only update)

None None...

July 9, 2019—KB4507452 (Monthly Rollup)

None None...

July 9, 2019—KB4507464 (Security-only update)

None None...

Guidance to mitigate unconstrained delegation vulnerabilities

Executive Summary Active Directory Forest trusts provide a secure way for resources in a forest to trust identities from another forest. This trust is directional; a trusted forest can authenticate its users to the trusting forest without allowing the reverse. A feature, Enforcement for forest...