Get-RBCD-Threaded

Get-RBCD-Threaded Strumento per scoprire percorsi di attacco di Resource-Based Constrained Delegation in ambienti Active Directory Basato quasi interamente sui meravigliosi articoli "Wagging the Dog: Abusing Resource-Based Constrained Delegation to Attack Active Directory" di Elad Shamir e "A Cas...

bofhound

THIS REPO IS NO LONGER ACTIVE ⛔🚧 This repo is no longer maintained. To submit an issue, pull request, or obtain the lastest version, reference https://github.com/coffeegist/bofhound 🚧⛔ root@kitploit: | / / / | /| | | | / \ | | | | | \ | | | \ | | | | | | | | | | || | | | | | | | | | | | | | .--. ...

CVE-2025-61156

CVE-2025-61156 È stata scoperta una vulnerabilità nel componente in modalità kernel TfSysMon.sys di ThreatFire System Monitor =v4.7.0.53 che consente a utenti non privilegiati di terminare arbitrariamente processi con privilegi di modalità kernel. Di conseguenza, i processi PPL e i processi di...

aced

Aced Aced è uno strumento per analizzare e risolvere la DACL di un singolo principal di Active Directory target. Aced identificherà i privilegi di accesso in ingresso interessanti concessi contro l'account target, risolverà i SID delle autorizzazioni in ingresso e presenterà tali dati...

psexec_noinstall

psexecnoinstall Das Repository enthält psexec, das dabei hilft, den vergessenen Pipe auszunutzen Lassen Sie einen nicht genialen Administrator sich mit PsExec mit dem Host verbinden: Wir haben das entdeckt, als wir das RemComCommunication-Bundle sahen. Dieses ist Standard für PsExec Mit...

Cable

Cable Cable ist ein Post-Exploitation-Tool, das für Reconnaissance und die auf Discretionary Access Control Lists DACL fokussierte Ausnutzung einer Active-Directory-Umgebung eingesetzt wird. Dieses Tool wurde in erster Linie entwickelt, um mehr über die offensive .NET-Entwicklung im...

WindowsDACLEnumProject

Projeto Windows DACL Enum Uma coleção de ferramentas para enumerar e analisar DACLs do Windows Lançado como código aberto pela NCC Group Plc - http://www.nccgroup.com/ Desenvolvido por Ollie Whitehouse, ollie dot whitehouse at nccgroup dot com https://github.com/nccgroup/WindowsDACLEnumProject...

CVE-2026-72382

A flaw was found in ksmbd in the Linux kernel. A remote attacker, by sending a specially crafted security descriptor with an undersized Discretionary Access Control List DACL during an SMB2SETINFO operation, can trigger an integer underflow. This underflow leads to excessive memory allocations fo...

CVE-2026-72382

In the Linux kernel, the following vulnerability has been resolved: ksmbd: reject undersized DACLs before parsing ACEs parsedacl limits the attacker-controlled ACE count by comparing it with the number of minimal ACEs that fit in the DACL size. The DACL size field is 16 bits, but the expression...

Linux Distros Unpatched Vulnerability : CVE-2026-72382

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ksmbd: reject undersized DACLs before parsing ACEs parsedacl limits the attacker-controlled ACE count by comparing it with the number of minimal ACEs that fit i...

CVE-2026-68098

A flaw was found in ksmbd, a Linux kernel module. The setntacldacl function, which processes Discretionary Access Control Lists DACLs, can stop copying Access Control Entries ACEs prematurely due to a size accounting overflow. This can cause a subsequent deduplication process to read beyond the...

CVE-2026-68099

In the Linux kernel, the following vulnerability has been resolved: ksmbd: restore DACL size on checkaddoverflow to avoid malformed ACL checkaddoverflow unconditionally writes the truncated sum into d even on overflow, per its contract in include/linux/overflow.h. The four checkaddoverflow guards...

CVE-2026-68100

In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate numsubauth when copying ACE in setntacldacl setntacldacl copies each ACE from the attacker-controlled stored security descriptor verbatim into the response DACL without checking sid.numsubauth. The ACE bytes...

UBUNTU-CVE-2026-68099

In the Linux kernel, the following vulnerability has been resolved: ksmbd: restore DACL size on checkaddoverflow to avoid malformed ACL checkaddoverflow unconditionally writes the truncated sum into d even on overflow, per its contract in include/linux/overflow.h. The four checkaddoverflow guards...

CVE-2026-68098

In the Linux kernel, the following vulnerability has been resolved: ksmbd: bound DACL dedup walk to copied ACEs setntacldacl can stop copying ACEs before consuming the full input DACL when size accounting overflows. When that happens, numaces reflects only the ACEs that were actually copied into...

UBUNTU-CVE-2026-68098

In the Linux kernel, the following vulnerability has been resolved: ksmbd: bound DACL dedup walk to copied ACEs setntacldacl can stop copying ACEs before consuming the full input DACL when size accounting overflows. When that happens, numaces reflects only the ACEs that were actually copied into...

EUVD-2026-55481

In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate numsubauth when copying ACE in setntacldacl setntacldacl copies each ACE from the attacker-controlled stored security descriptor verbatim into the response DACL without checking sid.numsubauth. The ACE bytes...

CVE-2026-68099

The CVE-2026-68099 vulnerability is in ksmbd within the Linux kernel, where check_add_overflow() could cause an on-wire NT ACL to be malformed. In the affected DACL builders (set_posix_acl_entries_dacl() and set_ntacl_dacl()), overflow handling previously allowed the loop to break while the desti...

CVE-2026-68098

CVE-2026-68098 affects ksmbd in the Linux kernel. The root cause is in set_ntacl_dacl(), which can stop copying ACEs when DACL size accounting overflows. As a result, the dedup walk may inspect a tail beyond the copied ACEs, potentially enabling an out-of-bounds read with possible denial of servi...

EUVD-2026-55479

In the Linux kernel, the following vulnerability has been resolved: ksmbd: bound DACL dedup walk to copied ACEs setntacldacl can stop copying ACEs before consuming the full input DACL when size accounting overflows. When that happens, numaces reflects only the ACEs that were actually copied into...