blankspace

Blank Space Blank Space is a refactoring of James Forshaw's original proof of concept for CVE-2021-43893, EFSRPC arbitrary file upload privilege escalation. Blank Space can create arbitrary files on a remote host that is using unconstrained delegation if it isn't patched for CVE-2021-43893. File...

krbrelayx

Krbrelayx - Toolkit per il relaying Kerberos e l'abuso della delega non vincolata Toolkit per abusare di Kerberos. Richiede impacket, ldap3 e dnspython per funzionare. Si consiglia di installare impacket direttamente da git per avere l'ultima versione disponibile. Maggiori informazioni su questo...

LDAP Delegation Audit

Audit unconstrained, constrained, and resource-based constrained delegation from kittysploit import from lib.protocols.ldap.ldappostclient import LdapPostClient from lib.protocols.ldap.adhelpers import UACTRUSTEDFORDELEGATION, UACTRUSTEDTOAUTHFORDELEGATION, class ModulePost, LdapPostClient: info ...

AD unconstrained delegation

Detects computers and users trusted for unconstrained delegation. !/usr/bin/env python3 -- coding: utf-8 -- """Detect unconstrained delegation computers and users.""" from kittysploit import from lib.protocols.ldap.adclient import Adclient class ModuleScanner, Adclient: info = "name": "AD...

Metasploit Wrap-Up 02/06/2026

Google Summer of Code 2026 Our very own Jack Heysel has added some documentation which outlines the Metasploit Framework project ideas for GSoC 2026. For anyone interested in applying please see GSoC-How-To-Apply documentation, or reach out on slack to any of the following GSoC mentors on Slack v...

Metasploit Weekly Wrap-Up 08/02/2024

Metasploit goes to Hacker Summer Camp Next week, Metasploit will have demos at both Black Hat and DEF CON where the latest functionality from this year will be presented. The Black Hat demo will be on Thursday the 8th from 10:10 to 11:25 and the DEF CON demo will be on Saturday the 10th from 12:0...

msLDAPDump - LDAP Enumeration Tool

msLDAPDump simplifies LDAP enumeration in a domain environment by wrapping the lpap3 library from Python in an easy-to-use interface. Like most of my tools, this one works best on Windows. If using Unix, the tool will not resolve hostnames that are not accessible via eth0 currently. Binding...

Unconstrained Delegation

Microsoft to support scenarios where users authenticate via Kerberos to one system and information needs to be updated on another system implemented unconstrained delegation. This… Continue reading - Unconstrained Delegation...

AD Starter Scan - Unconstrained delegation

Binary data adsikerberosdeleg.nbin...

July 9, 2019—KB4507461 (Security-only update)

July 9, 2019—KB4507461 Security-only update Applies To Windows Server 2008 Service Pack 2 Note July 19, 2019 - IMPORTANT: Beginning with the July 2019 updates, Active Directory domain controllers will intentionally block unconstrained delegation across forest, external, and quarantined trusts...

July 9, 2019—KB4507452 (Monthly Rollup)

July 9, 2019—KB4507452 Monthly Rollup Applies To Windows Server 2008 Service Pack 2 Note Customers who have applied KB4489887 or later Monthly Rollup Packages to Microsoft Server 2008 SP2 may notice a change to the operating system version string. The “build number” component of the version strin...

July 9, 2019—KB4507435 (OS Build 17134.885)

July 9, 2019—KB4507435 OS Build 17134.885 Applies To Windows 10, version 1803, all editions Note The Windows 10 April 2018 Update will reach end of service on November 12, 2019 for Home and Pro editions. We will begin updating devices running the Windows 10 April 2018 Update starting July 16, 201...

July 9, 2019—KB4507462 (Monthly Rollup)

July 9, 2019—KB4507462 Monthly Rollup Applies To Windows Server 2012 Windows Embedded 8 Standard Note July 19, 2019 - IMPORTANT: Beginning with the July 2019 updates, Active Directory domain controllers will intentionally block unconstrained delegation across forest, external, and quarantined...

July 9, 2019—KB4507464 (Security-only update)

July 9, 2019—KB4507464 Security-only update Applies To Windows Server 2012 Windows Embedded 8 Standard Note July 19, 2019 - IMPORTANT: Beginning with the July 2019 updates, Active Directory domain controllers will intentionally block unconstrained delegation across forest, external, and quarantin...

Guidance to mitigate unconstrained delegation vulnerabilities

Executive Summary Active Directory Forest trusts provide a secure way for resources in a forest to trust identities from another forest. This trust is directional; a trusted forest can authenticate its users to the trusting forest without allowing the reverse. A feature, Enforcement for forest...