pentest-book

description: - Este libro contiene un montón de información, scripts y conocimientos utilizados durante mis pentests. /home/six2dez/.pentest-book Gracias por visitar este sitio, por favor considera mejorar este libro con algunas herramientas o técnicas increíbles que conozcas, puedes contactarme...

MITM6-Kerberos-CNAME-Abuse

Relay de Autenticación Kerberos - Técnica de Abuso de CNAME PoC Antecedentes Esta herramienta es la prueba de concepto de la técnica de Relay por Abuso de CNAME de Kerberos, basada en la herramienta MITM6. La investigación descubrió una falla en el comportamiento del cliente Kerberos de Windows:...

Kerberos-CVE-2026-27912

Kerberos-CVE-2026-27912 CVE-2026-27912 - Windows Kerberos Elevation of Privilege Vulnerability ResetNightmare - Unauthorized password reset via Kerberos Change Password protocol flaw. 📋 Details Field| Value ---|--- CVE| CVE-2026-27912 Title| Windows Kerberos Elevation of Privilege Vulnerability...

CVE-2023-21817

CVE-2023-21817 - Comprobador de Vulnerabilidad de Elevación de Privilegios Local LPE en Kerberos de Windows Una prueba de concepto PoC minimalista en C++ / Comprobador de vulnerabilidad para CVE-2023-21817. Esta utilidad ayuda a investigadores de seguridad y administradores de sistemas a determin...

Astra Linux – Vulnerability in Samba

Windows Kerberos Elevation of Privilege Vulnerability...

CVE-2026-69822

Numeric truncation error in Windows Kerberos allows an authorized attacker to elevate privileges locally...

CVE-2026-69760

Out-of-bounds read in Windows Kerberos allows an unauthorized attacker to deny service over a network...

CVE-2026-69744

Null pointer dereference in Windows Kerberos allows an unauthorized attacker to deny service over a network...

CVE-2026-69685

Heap-based buffer overflow in Windows Kerberos allows an authorized attacker to elevate privileges locally...

CVE-2026-69676

Authentication bypass by capture-replay in Windows Kerberos allows an authorized attacker to execute code over a network...

EUVD-2026-73623

Out-of-bounds read in Windows Kerberos allows an unauthorized attacker to deny service over a network...

CVE-2026-69760

Windows Kerberos is affected by an out-of-bounds read vulnerability that allows an unauthorized, unauthenticated attacker to trigger a denial of service over the network. The vulnerability is rated CVSS 7.5 (HIGH) with a low attack complexity and no user interaction required. CISA's SSVC assessme...

CVE-2026-69685

Windows Kerberos is affected by a heap-based buffer overflow that allows an authorized attacker to locally elevate privileges . Per Microsoft, the vulnerability carries a CVSS 3.1 score of 7.8 (HIGH) with a local attack vector, low complexity, low privileges required, and no user interaction, res...

EUVD-2026-73573

Heap-based buffer overflow in Windows Kerberos allows an authorized attacker to elevate privileges locally...

EUVD-2026-73071

Authentication bypass by capture-replay in Windows Kerberos allows an authorized attacker to execute code over a network...

CVE-2026-69676

CVE-2026-69676 is an authentication bypass by capture-replay vulnerability in Windows Kerberos that allows an authorized attacker to achieve remote code execution over a network. The underlying mechanism involves replaying captured Kerberos authentication traffic, enabling privilege escalation be...

EUVD-2026-73065

Numeric truncation error in Windows Kerberos allows an authorized attacker to elevate privileges locally...

CVE-2026-69822

CVE-2026-69822 is a local privilege escalation vulnerability in Windows Kerberos caused by a numeric truncation error . An authorized attacker with low privileges can exploit this to achieve full confidentiality, integrity, and availability impact (CVSS 3.1: 7.8 HIGH , vector AV:L/AC:L/PR:L/UI:N/...

EUVD-2026-73054

Null pointer dereference in Windows Kerberos allows an unauthorized attacker to deny service over a network...

CVE-2026-69744

Windows Kerberos is affected by a null pointer dereference that allows an unauthenticated attacker to trigger a denial of service over a network . The CVSS 3.1 score is 7.5 (HIGH) , with the vector indicating low attack complexity, no privileges required, and no user interaction. The primary impa...