SharpSuccessor

SharpSuccessor SharpSuccessor è un Proof of Concept POC .NET per armare completamente l'attacco BadSuccessor di Yuval Gordon @YuG0rd di Akamai. Un utente con bassi privilegi che dispone dei permessi CreateChild su qualsiasi Unità Organizzativa OU nel dominio Active Directory, con accesso in...

Invoke-BadSuccessor.ps1

Invoke-BadSuccessor Missbrauchen Sie Erstellungsrechte für Delegated Managed Service Accounts dMSA in anfälligen Organisationseinheiten OUs, um in Active-Directory-Umgebungen Privilegien zu eskalieren BadSuccessor-Schwachstelle – CVE-2025-53779. Übersicht Invoke-BadSuccessor automatisiert eine...

OS Command Injection

priest-runner is vulnerable to OS command injection. The vulnerability exists as it passes unsanitized input into a spawn call through a POST request into PriestController.prototype.createChild...

Command Injection in priest-runner

All versions of priest-runner are vulnerable to Command Injection. The package fails to sanitize input and passes it directly to a spawn call, which may allow attackers to execute arbitrary code in the system. The PriestController.prototype.createChild function is vulnerable since the spawn...

Command Injection

Overview All versions of priest-runner are vulnerable to Command Injection. The package fails to sanitize input and passes it directly to a spawn call, which may allow attackers to execute arbitrary code in the system. The PriestController.prototype.createChild function is vulnerable since the...