pentest-book

description: - This book contains a bunch of info, scripts and knowledge used during my pentests. /home/six2dez/.pentest-book Thanks to visit this site, please consider enhance this book with some awesome tools or techniques you know, you can contact me by Telegram@six2dez, Twitter@six2dez1 or...

MITM6-Kerberos-CNAME-Abuse

Kerberos Authentication Relay - CNAME Abuse Technique PoC Background This tool is the proof-of-concept for Kerberos CNAME Abuse Relay technique, based on the MITM6 tool. The research uncovered a flaw in Windows Kerberos client behavior: when a DNS CNAME record is returned, the client follows the...

CVE-2023-21817

CVE-2023-21817 - Windows Kerberos LPE Vulnerability Checker A minimalist C++ Proof of Concept PoC / Vulnerability Checker for CVE-2023-21817. This utility helps security researchers and system administrators determine whether a Windows system is vulnerable to the Kerberos Local Privilege Escalati...

Kerberos-CVE-2026-27912

Kerberos-CVE-2026-27912 CVE-2026-27912 - Windows Kerberos Elevation of Privilege Vulnerability ResetNightmare - Unauthorized password reset via Kerberos Change Password protocol flaw. 📋 Details Field| Value ---|--- CVE| CVE-2026-27912 Title| Windows Kerberos Elevation of Privilege Vulnerability...

CVE-2026-83720

Use after free in Windows Kerberos allows an authorized attacker to elevate privileges locally...

CVE-2026-70064

Integer underflow wrap or wraparound in Windows Kerberos allows an authorized attacker to elevate privileges locally...

CVE-2026-108132

Double free in Windows Kerberos allows an authorized attacker to elevate privileges locally...

CVE-2026-108132

A Double free vulnerability exists in Windows Kerberos that allows an authorized attacker to achieve local privilege elevation . The vulnerability is associated with CWE-415 . While no specific exploit links or internal component paths are provided in the documents, the vulnerability has a High b...

CVE-2026-70241

A Use after free vulnerability exists in Windows Kerberos that allows an authorized attacker to achieve local privilege escalation . The impact includes high levels of confidentiality, integrity, and availability. No specific exploit details or in-the-wild exploitation information are provided in...

Windows Kerberos Elevation of Privilege Vulnerability

Integer underflow wrap or wraparound in Windows Kerberos allows an authorized attacker to elevate privileges locally...

CVE-2026-108132: Double Free

Double free in Windows Kerberos allows an authorized attacker to elevate privileges locally...

CVE-2026-70241: Use After Free

Use after free in Windows Kerberos allows an authorized attacker to elevate privileges locally...

CVE-2026-83720: Use After Free

Use after free in Windows Kerberos allows an authorized attacker to elevate privileges locally...

CVE-2026-70064: Integer Underflow (Wrap or Wraparound)

Integer underflow wrap or wraparound in Windows Kerberos allows an authorized attacker to elevate privileges locally...

Astra Linux – Vulnerability in Samba

Windows Kerberos Elevation of Privilege Vulnerability...

CVE-2026-69822

Numeric truncation error in Windows Kerberos allows an authorized attacker to elevate privileges locally...

CVE-2026-69760

Out-of-bounds read in Windows Kerberos allows an unauthorized attacker to deny service over a network...

CVE-2026-69744

Null pointer dereference in Windows Kerberos allows an unauthorized attacker to deny service over a network...

CVE-2026-69685

Heap-based buffer overflow in Windows Kerberos allows an authorized attacker to elevate privileges locally...

CVE-2026-69676

Authentication bypass by capture-replay in Windows Kerberos allows an authorized attacker to execute code over a network...