12 matches found
Tritium
Tritium A tool to enumerate and spray valid Active Directory accounts through Kerberos Pre-Authentication. Background Although many Kerberos password spraying tools currently exist on the market, I found it difficult to find tools with the following built-in functionality: The ability to prevent...
smartbrute
Description The smart password spraying and bruteforcing tool for Active Directory Domain Services. ⚠️ This project works. But the filthy coding makes it more PoC than a stable tool. I may or may not rewrite this in the future, but at least you have everything here to work with bruteforce on any...
kerbrute
Kerbrute Una herramienta para realizar rápidamente fuerza bruta y enumerar cuentas válidas de Active Directory a través de la Pre-Autenticación de Kerberos. Obtén los últimos binarios desde la página de lanzamientos para empezar. Antecedentes Esta herramienta surgió de unos scripts en bash que...
Apache Kerby: org.apache.kerby/kerb-server: Apache Kerby: Kerberos pre-authentication bypass via unrecognized PA-DATA
A flaw was found in Apache Kerby. An attacker can bypass the Kerberos pre-authentication check by sending a Pre-Authentication Data PA-DATA packet with an unrecognized or unsupported type. This vulnerability allows an attacker to circumvent the initial authentication step, potentially leading to...
Security Bulletin: IBM InfoSphere Information Server is affected by multiple vulnerabilities in Apache Kerby
Summary Multiple vulnerabilities in Apache Kerby that is used by InfoSphere Information Server were addressed. Vulnerability Details CVEID:CVE-2026-57915 DESCRIPTION: It is possible to bypass the Kerberos pre-authentication check in Apache Kerby by sending a PA-DATA with an unrecognized or...
Apache Kerby Kerberos Pre-authentication Bypass Vulnerability
Apache Kerby is a Java implementation of the Kerberos protocol, primarily used for providing authentication and authorization services. Apache Kerby has a vulnerability related to bypassing Kerberos pre-authentication. This vulnerability arises when users send PA-DATA that includes unrecognized o...
EUVD-2020-7902
Malware in sbrugna...
Tritium - Password Spraying Framework
A tool to enumerate and spray valid Active Directory accounts through Kerberos Pre-Authentication. Background Although many Kerberos password spraying tools currently exist on the market, I found it difficult to find tools with the following built-in functionality: The ability to prevent users fr...
CVE-2020-15931
Netwrix Account Lockout Examiner before 5.1 allows remote attackers to capture the Net-NTLMv1/v2 authentication challenge hash of the Domain Administrator that is configured within the product in its installation state by generating a single Kerberos Pre-Authentication Failed ID 4771 event on a...
PT-2020-14724
Name of the Vulnerable Software and Affected Versions Netwrix Account Lockout Examiner versions prior to 5.1 Description The issue allows remote attackers to capture the Net-NTLMv1/v2 authentication challenge hash of the Domain Administrator by generating a single Kerberos Pre-Authentication Fail...
CVE-2020-15931: Exposure of Sensitive Information to an Unauthorized Actor
Netwrix Account Lockout Examiner before 5.1 allows remote attackers to capture the Net-NTLMv1/v2 authentication challenge hash of the Domain Administrator that is configured within the product in its installation state by generating a single Kerberos Pre-Authentication Failed ID 4771 event on a...
