cs-token-vault

Token Vault BOF para Cobalt Strike Este Beacon Object File BOF crea almacenamiento en memoria para tokens de acceso de Windows robados/duplicados, lo que te permite: Intercambiar/reutilizar tokens ya robados sin volver a duplicarlos. Almacenar tokens para usarlos más tarde en caso de cierre de...

CVE-2022-26923

CVE-2022-26923 – Certifried Exploit Abuso de AD CS Automatización de la explotación de CVE-2022-26923 Certifried que permite una elevación de privilegios mediante el abuso de Active Directory Certificate Services AD CS y Resource-Based Constrained Delegation RBCD, lo que lleva al volcado del hash...

CVE-2022-26923-rayng

Explotando CVE-2022-26923: Escalada de Privilegios mediante Autoridad de Certificación Resumen CVE-2022-26923 es una vulnerabilidad en los Servicios de Certificados de Active Directory AD CS que permite a un atacante escalar privilegios abusando de la autenticación basada en certificados. Esta gu...

ESCepcion

🛡️ ESCepcion Active Directory Certificate Services Auditor ESCepcion is an open-source tool for auditing and assessing vulnerabilities in Active Directory Certificate Services AD CS infrastructures. It is designed to automate the detection of privilege escalation paths ESC with a strict focus on...

Certighost-CVE-2026-54121

Document Type: Detection Use Case Related CVE: CVE-2026-54121 Certighost Author: Youssef Benchater Detection Use Case: Certighost CVE-2026-54121 This document describes the Splunk detection built for CVE-2026-54121. It follows the standard detection use case format so it can sit in a detection...

POC-CVE-2026-54121-Certighost

CertiGhost CVE-2026-54121 - Kit de explotación de AD CS Chase Fallback Resumen CertiGhost es una vulnerabilidad crítica CVSS 8.8 en Active Directory Certificate Services AD CS que permite a un usuario de dominio con privilegios bajos suplantar un Controlador de Dominio y lograr el compromiso tota...

CS-Remote-OPs-BOF

Remote Operations BOF This repo serves as an addition to our previously released SA repo. Our original stance was that we would not release our tooling that modified other systems, and we would only provide information gathering tooling in a ready to go format. Over time, we have seen many other...

CVE-2022-26923

CVE-2022-26923 Descripción Esta vulnerabilidad permitía a un usuario con pocos privilegios escalar privilegios a administrador de dominio en un entorno predeterminado de Active Directory con el rol de servidor de Servicios de Certificados de Active Directory AD CS instalado. Está relacionada...

CVE-2024-49019-rayng

Explotando CVE-2024-49019: Escalada de Privilegios en la Autoridad de Certificación Descripción General CVE-2024-49019 es una vulnerabilidad en los Servicios de Certificado de Active Directory AD CS que permite a un atacante escalar privilegios mediante el uso indebido de la autenticación basada ...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: x86/MCE: Always save the CS register in cases of AMD Zen IF Poison errors. The Instruction Fetch IF units on current AMD Zen-based systems do not guarantee a synchronous MC for poison consumption errors. Therefore,...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Firmware: csdsp: Use strnlen on name fields in V1 wmfw files. Use strnlen instead of strlen for the algorithm and coefficient name string arrays in V1 wmfw files. In V1 wmfw files, the name is a NUL-terminated string stored in a...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Firmware: csdsp: Prevent buffer overflows when processing V2 algorithm headers. It is necessary to ensure that all fields of a V2 algorithm header fit within the available firmware data buffer. The wmfw V2 format introduced...

Exploit for Improper Authorization in Microsoft

🛡 AI Security Tool Module CVE-2026-54121: Active Directory...

CVE-2026-69821

Improper encoding or escaping of output in Active Directory Certificate Services AD CS allows an authorized attacker to elevate privileges locally...

CVE-2026-69624

Incomplete list of disallowed inputs in Active Directory Certificate Services AD CS allows an authorized attacker to perform tampering over a network...

CVE-2026-69395

Use of externally-controlled format string in Active Directory Certificate Services AD CS allows an authorized attacker to disclose information over a network...

CVE-2026-62810

Heap-based buffer overflow in Active Directory Certificate Services AD CS allows an authorized attacker to elevate privileges locally...

EUVD-2026-73692

Use of externally-controlled format string in Active Directory Certificate Services AD CS allows an authorized attacker to disclose information over a network...

CVE-2026-69395

Active Directory Certificate Services (AD CS) contains a vulnerability caused by the use of an externally-controlled format string , allowing an authorized attacker (low privileges required) to disclose information over a network . The CVSS v3.1 score is 6.5 (MEDIUM) with a vector of AV:N/AC:L/PR...

CVE-2026-69821

CVE-2026-69821 is a local privilege escalation vulnerability in Active Directory Certificate Services (AD CS) caused by improper encoding or escaping of output. An authorized attacker with low privileges can exploit it without user interaction to gain full compromise of confidentiality, integrity...