impacket

Impacket 版权所有 Fortra, LLC 及其附属公司。保留所有权利。 Impacket 最初由 SecureAuth 创建，现在由 Fortra 的 Core Security 维护。 Impacket 是一个 Python 类集合，用于处理网络协议。Impacket 专注于提供对数据包的低级编程访问，并且对于某些协议（例如 SMB1-3 和 MSRPC），它提供了协议实现本身。可以从头开始构建数据包，也可以从原始数据解析，面向对象的 API 使得处理深层协议层次结构变得简单。该库提供了一组工具，作为可以在该库上下文中完成的操作示例。 支持哪些协议？ Ethernet、Lin...

impacket

Impacket 版权所有 Fortra, LLC 及其附属公司。保留所有权利。 Impacket 最初由 SecureAuth 创建，现由 Fortra 的核心安全团队维护。 Impacket 是一个用于处理网络协议的 Python 类集合。Impacket 专注于为数据包提供低级编程访问，对于某些协议（如 SMB1-3 和 MSRPC）还提供协议实现本身。数据包可以从头构建，也可以从原始数据解析，面向对象的 API 使得处理深层次协议层级变得简单。该库提供了一套工具作为库功能使用的示例。 支持哪些协议？ Ethernet, Linux "Cooked" 捕获。 IP, TCP, UD...

ldap_shell

LDAP shell 本项目是 Impacket 中 ldapshell 的一个分支。它通过 LDAP/LDAPS 协议为 Active Directory 的枚举和操作提供了一个交互式 shell，对系统管理员和安全专业人员都很有用。 安装 这些工具仅兼容 Python 3.5+。从 GitHub 克隆仓库，安装依赖项即可使用。 使用 pip 安装： git clone https://github.com/PShlyundin/ldapshell.git cd ldapshell python3 -m pip install . 使用 uv 安装： uv venv uv pip...

latma

Lateral movement analyzer tool Lateral movement analyzer LATMA collects authentication logs from the domain and Azure AD environments and searches for potential lateral movement attacks and suspicious activity, the lateral movement can be in the AD environment or between cloud and on-prem. The to...

BloodHound.py-Kerberos

这个 fork 是什么？！ 我需要一个支持 Kerberos 的 BloodHound，并找到了这条评论。事实证明，一直都有一个支持 Kerberos 认证的分支！我冒昧地将这个分支合并到了 master，以获得那些给力的 BloodHound 4.2+ 导出功能。所有功劳都归于真正编写这些代码的人: 注意 正如 Dirkjan 先生本人所说，这"还需要更多工作和测试"。它可能无法在所有情况下正常工作，因此如果你遇到任何问题，请报告，我们可以尝试修复。也许有一天我们可以将其作为 PR 提交到主仓库。 $ python3 /opt/BloodHound.py/bloodhound.py -...

Berserko

Berserko - 适用于 Burp Suite 的 Kerberos 认证 由 NCC Group Plc 以开源形式发布 - http://www.nccgroup.trust/ 由 Richard Turnbull 开发，richard dot turnbull at nccgroup dot com http://www.github.com/nccgroup/Berserko 根据 AGPL 发布，更多信息请参阅 LICENSE。 ❗ 重要提示 ❗ Berserko 的后续开发将在 https://github.com/rteatea/Berserko 进行。 简介...

mobileiron-exploit

使用 Kerberos 认证的 Tabshell 漏洞利用 改编自 OWASSRF + TabShell 漏洞利用链 首先，对 pyprsp 模块打补丁以启用 WSManStackVersion 降级，并安装依赖项 $ git clone https://github.com/jborean93/pypsrp $ patch -p0 pyprsp.patch patching file pypsrp/src/pypsrp/complexobjects.py patching file pypsrp/src/pypsrp/powershell.py patching file...

Rocky Linux 9 [CIQ] Security Update: libipa_hbac / libipa_hbac-debuginfo / libsss_autofs / etc Multiple Vulnerabilities (crlsa-2026_42122)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202642122 advisory. sssd: sssd: sudo LDAP provider searches entire directory tree for sudoRole objects by default, enabling privilege escalation CVE-2026-14474 sssd: sssd: GP...

Rocky Linux 8 [CIQ] Security Update: libipa_hbac / libipa_hbac-debuginfo / libsss_autofs / etc Multiple Vulnerabilities (crlsa-2026_46990)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202646990 advisory. sssd: sssd: sudo LDAP provider searches entire directory tree for sudoRole objects by default, enabling privilege escalation CVE-2026-14474 sssd: sssd: GP...

CVE-2025-59390-

CVE-2025-59390- 所附的POC将允许您破解Apache Druid中的Kerberos签名，以及任何由ThreadLocalRandom生成的整数。 安全公告 - Apache...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: ksmbd: Fixed a use-after-free issue in Kerberos authentication. The introduction of sess-user = NULL was necessary to fix the dangling pointer created by ksmbdfreeuser. However, it is possible that another thread might be...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: smb: client: fixed the issue where krb5 mounts failed when the client tried to mount shares with incorrect credentials. It turned out that the client was reusing the SMB session from the first mount attempt, even though a differe...

CVE-2026-88007

Traefik is an open source HTTP reverse proxy and load balancer. From 2.11.0 until 2.11.57 and 3.7.13, the HTTP/3 entrypoint ConnContext does not call service.AddTransportOnContext, so kerberosRoundTripper uses a shared backend transport instead of a transport dedicated to each frontend connection...

CVE-2026-88007

Traefik versions 2.11.0 through 2.11.57 and 3.7.13 contain a backend connection reuse flaw in the HTTP/3 entrypoint. The ConnContext does not call service.AddTransportOnContext, causing kerberosRoundTripper to share a single backend transport across all frontend connections rather than using a de...

The vulnerability of the Kerberos authentication protocol, related to a countable loss of significance, allows attackers to cause a service failure.

The vulnerability of the Kerberos authentication protocol is related to a countable amount of loss of significance. Exploiting this vulnerability can allow a malicious actor to cause a service failure...

CVE-2026-75159

An unauthenticated client that can reach a MongoDB Connector for BI deployment configured with Kerberos authentication may cause mongosqld to terminate when a crafted authentication exchange encounters a specific GSSAPI error-handling condition. This can interrupt BI Connector availability until...

CVE-2026-75159

CVE-2026-75159 affects MongoDB Connector for BI (mongosqld) deployments configured with Kerberos authentication . An unauthenticated, network-reachable client can trigger a specific GSSAPI error-handling condition during a crafted authentication exchange, causing mongosqld to terminate. This inte...

CVE-2026-75159 MongoDB BI Connector Improper Memory Handling During Failed Kerberos Authentication May Cause Process Termination

An unauthenticated client that can reach a MongoDB Connector for BI deployment configured with Kerberos authentication may cause mongosqld to terminate when a crafted authentication exchange encounters a specific GSSAPI error-handling condition. This can interrupt BI Connector availability until...

CVE-2026-75159 MongoDB BI Connector Improper Memory Handling During Failed Kerberos Authentication May Cause Process Termination

An unauthenticated client that can reach a MongoDB Connector for BI deployment configured with Kerberos authentication may cause mongosqld to terminate when a crafted authentication exchange encounters a specific GSSAPI error-handling condition. This can interrupt BI Connector availability until...

MongoDB BI Connector Improper Memory Handling During Failed Kerberos Authentication May Cause Process Termination

An unauthenticated client that can reach a MongoDB Connector for BI deployment configured with Kerberos authentication may cause mongosqld to terminate when a crafted authentication exchange encounters a specific GSSAPI error-handling condition. This can interrupt BI Connector availability until...