krbrelayx

Krbrelayx - набор инструментов для ретрансляции Kerberos и злоупотребления безусловной делегацией Набор инструментов для злоупотребления Kerberos. Для работы требует impacket, ldap3 и dnspython. Рекомендуется устанавливать impacket напрямую из git, чтобы иметь последнюю версию. Дополнительная...

GIUDA

GIUDA GET a TGS on behalf of another user without password Scenario: you are Local Administrator and there is a logged User you want to Impersonate! Chain: SeTcbPrivilege allows you to read LSA storage, extract the SESSION KEY from TGT, and forge a request asking for a TGS; You must use LUID...

ldeep

============== État du projet .. image:: https://github.com/franc-pentest/ldeep/actions/workflows/python-test.yml/badge.svg :target: https://github.com/franc-pentest/ldeep/actions/workflows/python-test.yml :alt: Build status .. image:: https://badgen.net/pypi/v/ldeep :target:...

Kerberos-CVE-2026-27912

Kerberos-CVE-2026-27912 CVE-2026-27912 - Windows Kerberos Elevation of Privilege Vulnerability ResetNightmare - Unauthorized password reset via Kerberos Change Password protocol flaw. 📋 Details Field| Value ---|--- CVE| CVE-2026-27912 Title| Windows Kerberos Elevation of Privilege Vulnerability...

Tritium

Tritium أداة لتعداد ورش كلمات مرور حسابات Active Directory الصالحة عبر التحقق المسبق من Kerberos. خلفية على الرغم من وجود العديد من أدوات رش كلمات مرور Kerberos حاليًا في السوق، وجدت صعوبة في العثور على أدوات تحتوي على الوظائف المدمجة التالية: القدرة على منع المستخدمين من قفل المجال. القدرة على د...

CVE-2023-21817

CVE-2023-21817 - Comprobador de Vulnerabilidad de Elevación de Privilegios Local LPE en Kerberos de Windows Una prueba de concepto PoC minimalista en C++ / Comprobador de vulnerabilidad para CVE-2023-21817. Esta utilidad ayuda a investigadores de seguridad y administradores de sistemas a determin...

kerberoast

🚩 الرعاة إذا أعجبك هذا المشروع، فكر في رعايته على GitHub! Sponsors kerberoast مجموعة أدوات هجوم Kerberos -بيثون نقي- التثبيت pip3 install kerberoast المتطلبات المسبقة بايثون 3.6 انظر requirements.txt لغير الصبور هام: صيغ روابط الهدف المقبولة لـ LDAP و Kerberos هي التالية : +://:@/?= : +://:@/?=...

RITM

RITM This is a Python implementation of the man-in-the-middle attack described by Charlie Clark @exploitph in his post, New Attack Paths? AS Requested Service Tickets, and demonstrated in his proof-of-concept, Roast in the Middle. In short, this tool: 1. Performs ARP spoofing between your targets...

cve-2025-53779-kerberos_bypass_reproduction

CVE-2025-53779: Microsoft Windows Kerberos Authentication Bypass CVSS Score: 9.8 Critical Status: Active exploitation in the wild Disclosure: Microsoft August 2025 Patch Tuesday Zero-Day Overview CVE-2025-53779 is a critical authentication bypass vulnerability in Microsoft Windows Kerberos protoc...

mimikatz

mimikatz mimikatz is a tool I've made to learn C and make somes experiments with Windows security. It's now well known to extract plaintexts passwords, hash, PIN code and kerberos tickets from memory. mimikatz can also perform pass-the-hash, pass-the-ticket or build Golden tickets. root@kitploit:...

Talon

ESTE REPOSITORIO HA SIDO ARCHIVADO Para ver la última versión de Talon o para reportar un problema, consulte https://github.com/Tylous/Talon. Talon Talon es una herramienta diseñada para realizar ataques automatizados de adivinación de contraseñas mientras permanece sin ser detectado. Talon puede...

WCE

wce Wce is a powerful Hash injection tool. It can not only be used for Hash injection, but also directly retrieve plaintext or Hash. This tool is available in 32-bit and 64-bit versions. help Parameter description: root@kitploit: l 列出登录的会话和NTLM凭据（默认值）； s 修改当前登录会话的NTLM凭据 参数：:::； r...

The vulnerability of the Kerberos Key Distribution Center (KDC) component of Windows operating systems allows a perpetrator to trigger a service failure.

The vulnerability of the Kerberos Key Distribution Center KDC component in Windows operating systems is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

EulerOS 2.0 SP10 : bind (EulerOS-SA-2026-3682)

According to the versions of the bind packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : BIND servers that are configured to use TKEY-based authentication via GSS-API tokens are vulnerable to excessive memory consumption when receiving a...

Berserko

Berserko - Kerberos authentication for Burp Suite Released as open source by NCC Group Plc - http://www.nccgroup.trust/ Developed by Richard Turnbull, richard dot turnbull at nccgroup dot com http://www.github.com/nccgroup/Berserko Released under AGPL, see LICENSE for more information ❗ Important...

CVE-2026-26128

CVE-2026-26128 Outil Python pour exploiter la réflexion Kerberos via la normalisation Unicode dans Windows Active Directory. Basé sur les recherches de Guillaume André / Synacktiv. Installation Ces outils ne sont compatibles qu'avec Python 3.8+. Clonez le dépôt depuis GitHub, installez les...

detect_CVE-2026-25177

detect-CVE-2026-25177 Production-safe scanner that detects exploitation of CVE-2026-25177 — the Active Directory SPN Unicode Collision vulnerability CVSS 8.8. This vulnerability allows any authenticated user with write-SPN permissions to escalate privileges to SYSTEM by injecting Unicode characte...

CVE-2026-33826

🚨 CVE-2026-33826: Windows Active Directory Remote Code Execution RCE 📌 General Overview CVE-2026-33826 is a critical Remote Code Execution RCE vulnerability affecting Active Directory Domain Services AD DS. The flaw resides in the way the AD service handles malformed authentication requests throu...

cve-2026-20833-rc4-kerberos

CVE-2026-20833 — Kerberos RC4 Hardening This repository consolidates technical documentation , PowerShell scripts , Power BI dashboards , and official Microsoft references related to the progressive deprecation of RC4 in Kerberos for Active Directory environments , as part of Microsoft's security...

CVE-2022-33679_Checker

Comprobador de CVE-2022-33679 Comprobador ligero que verifica si un conjunto de credenciales de Active Directory está expuesto a CVE-2022-33679 ataque AS-REP de Kerberos sin pre-autenticación. El código está derivado de Bdenneu/CVE-2022-33679 y solo conserva la ruta de detección—nunca intenta...