Lucene search
+L

295 matches found

Kitploit
Kitploit
added 2026/08/31 8:56 p.m.3 views

RAITrigger

RAITrigger The RPC-function RAiForceElevationPromptForCOM from the appinfo.dll library allows SYSTEM coercion. This only works on domain joined systems. It turns out, that this function can be called from any low privileged user not to spawn a process but to trigger SYSTEM authentication to an...

6AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/08/31 8:51 p.m.5 views

json-sanitizer

json-sanitizer Given JSON-like content, The JSON Sanitizer converts it to valid JSON. Getting Started - Contact This can be attached at either end of a data-pipeline to help satisfy Postel's principle: be conservative in what you do, be liberal in what you accept from others Applied to JSON-like...

5.8AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/08/31 4:47 p.m.5 views

PetitPotam

PetitPotam PoC tool to coerce Windows hosts to authenticate to other machines via MS-EFSRPC EfsRpcOpenFileRaw or other functions : The tools use the LSARPC named pipe with inteface c681d488-d850-11d0-8c52-00c04fd90f7e because it's more prevalent. But it's possible to trigger with the EFSRPC named...

7.5CVSS6.9AI score0.66023EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/08/31 3:57 p.m.2 views

CVE-2026-33829-Writeup

CVE-2026-33829-Writeup Vulnerability Case Study: CVE-2026-33829 Windows Snipping Tool NTLM Coercion Executive Summary This write-up details the technical replication of CVE-2026-33829 , an information disclosure vulnerability within the modern Windows Snipping Tool application framework. By abusi...

4.3CVSS6.2AI score0.03447EPSS
SaveExploits5
NVD
NVD
added 2026/08/31 2:17 p.m.3 views

CVE-2026-76763

A flaw was found in SmallRye GraphQL. The number scalar coercion for BigInteger does not properly validate the magnitude of float or string inputs. An unauthenticated remote attacker can exploit this by sending a GraphQL query containing a large exponent float literal. This can lead to the...

7.5CVSS
SaveExploits0References2
CVE
CVE
added 2026/08/31 1:54 p.m.7 views

CVE-2026-76763

SmallRye GraphQL contains a flaw in its number scalar coercion for BigInteger , which fails to properly validate the magnitude of float or string inputs. An unauthenticated remote attacker can send a GraphQL query containing a large exponent float literal, triggering the allocation of extremely l...

7.5CVSS5.9AI score
SaveExploits0References2
EUVD
EUVD
added 2026/08/31 1:54 p.m.5 views

EUVD-2026-68525

A flaw was found in SmallRye GraphQL. The number scalar coercion for BigInteger does not properly validate the magnitude of float or string inputs. An unauthenticated remote attacker can exploit this by sending a GraphQL query containing a large exponent float literal. This can lead to the...

7.5CVSS5.9AI score
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/08/31 12:14 p.m.4 views

CVE-2026-76763

A flaw was found in SmallRye GraphQL. The number scalar coercion for BigInteger does not properly validate the magnitude of float or string inputs. An unauthenticated remote attacker can exploit this by sending a GraphQL query containing a large exponent float literal. This can lead to the...

7.5CVSS5.9AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/08/31 11:20 a.m.4 views

ADCSPwn

ADCSPwn A tool to escalate privileges in an active directory network by coercing authenticate from machine accounts Petitpotam and relaying to the certificate service. Usage Run ADCSPwn on your target network. root@kitploit: Author: @batsec - MDSec ActiveBreach Contributor: @Flangvik - TrustedSec...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/31 8:41 a.m.2 views

Ivanti-EPM-Coercion-Vulnerabilities

Ivanti EPM Coercion Vulnerabilities Proof of concept exploits for Ivanti EPM CVE-2024-13159 and others which allows for unauthenticated coercion of the Ivanti EPM machine credential for use in relay attacks. Blog Post Deep-dive analysis here:...

9.8CVSS7.4AI score0.99992EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/31 6:12 a.m.2 views

cupntlm-Automated-Exploit-For-CVE-2025-33073-

cupntlm CVE-2025-33073 — NTLM Reflection Bypass via DNS Coercion Automated exploitation tool for Active Directory environments. Overview cupntlm automates the NTLM reflection/relay attack chain that abuses CVE-2025-33073. It combines DNS record injection, forced authentication coercion PetitPotam...

8.8CVSS7.4AI score0.80415EPSS
SaveExploits7References3
Nuclei
Nuclei
added 2026/08/31 5:18 a.m.94 views

Ivanti EPM - Credential Coercion Vulnerability in GetHashForWildcard

A vulnerability in Ivanti Endpoint Manager EPM allows an unauthenticated attacker to coerce the EPM machine account credential via the GetHashForWildcard endpoint. The vulnerability exists due to improper input validation in the wildcard parameter, allowing an attacker to specify a remote UNC pat...

9.8CVSS7.5AI score0.91247EPSS
SaveExploits1References2
Nuclei
Nuclei
added 2026/08/31 5:18 a.m.96 views

Ivanti EPM - Credential Coercion Vulnerability in GetHashForSingleFile

A vulnerability in Ivanti Endpoint Manager EPM allows an unauthenticated attacker to coerce the EPM machine account credential via the GetHashForSingleFile endpoint. The vulnerability exists due to improper input validation in the wildcard parameter, allowing an attacker to specify a remote UNC...

9.8CVSS7.5AI score0.90081EPSS
SaveExploits1References2
Kitploit
Kitploit
added 2026/08/30 4:38 p.m.3 views

windows-coerced-authentication-methods

This repository contains a list of many methods to coerce a windows machine to authenticate to an attacker-controlled machine. All of these methods are callable by a standard user in the domain to force the machine account of the target Windows machine usually a domain controller to authenticate ...

5.9AI score
SaveExploits0References10
Kitploit
Kitploit
added 2026/08/28 7:56 p.m.4 views

relay_bible

Relay Bible — Guida al Relay per Test di Penetrazione Interni Un riferimento completo per gli attacchi di relay NTLM durante test di penetrazione interni autorizzati. Copre i fondamenti dell'autenticazione, le tecniche di coercizione, i target di relay per protocollo, gli strumenti, il chaining...

7.5CVSS7.3AI score0.01159EPSS
SaveExploits0References29
Kitploit
Kitploit
added 2026/08/28 5:59 p.m.6 views

CVE-2026-23751-poc

CVE-2026-23751-poc Prova de conceito que reimplementa a técnica descrita em Code White's NewRemotingTricks, direcionada ao Tungsten Automation Kofax Capture. CVE-2026-23751 Título: Tungsten Automation - Kofax Capture Leitura/Gravação de Arquivos Não Autenticada e Coerção SMB via .NET HTTP Remotin...

9.8CVSS5.9AI score0.00883EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/08/28 2:30 a.m.3 views

RemoteMonologue

RemoteMonologue RemoteMonologue é uma técnica de captura de credenciais no Windows que possibilita o comprometimento remoto de usuários ao explorar a chave RunAs do usuário interativo Interactive User e forçar autenticações NTLM via DCOM. Leia o RemoteMonologue: Weaponizing DCOM for NTLM...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/27 10:53 p.m.5 views

CVE-2025-33073-checker

CVE-2025-33073 Script di Verifica Questo script di verifica PoC approssimativo testa i target per la vulnerabilità CVE-2025-33073 tentando di eseguire attacchi di riflessione NTLM utilizzando la coercizione dell'autenticazione NTLM tramite Samba RPC; per farlo è necessario avere un account con...

8.8CVSS7.3AI score0.80415EPSS
SaveExploits7References4
Kitploit
Kitploit
added 2026/08/27 4:30 p.m.4 views

CVE-2025-33073

Strumento di Iniezione DNS Relay + Coercizione NTLM di Obscura$ Una proof-of-concept furtiva che combina iniezione DNS, relay NTLM e coercizione basata su RPC per testare i percorsi di relay di autenticazione in ambienti Active Directory Windows. ⚠️ DICHIARAZIONE DI NON RESPONSABILITÀ: Solo per...

8.8CVSS8.4AI score0.80415EPSS
SaveExploits7
RedhatCVE
RedhatCVE
added 2026/08/27 12:12 p.m.7 views

CVE-2026-18504

A flaw was found in fastify. A remote attacker can bypass schema validation when a request body schema targets a root primitive value. This occurs because the validation process may coerce a JSON string into an expected type, but the original unvalidated string is then passed to the application...

5.4CVSS5.4AI score0.00312EPSS
SaveExploits1References5
Rows per page
Query Builder