TruffleSnout

TruffleSnout 面向攻击方操作者的迭代式AD发现工具包。态势感知与定向低噪音枚举。优先考虑操作安全性。 发现： 林和信任 域和信任 全局编录/域控制器 搜索与查询AD： 查找对象和数据 限制以避免触发防御性断路器 精细化的原始LDAP查询，辅助属性筛选 实用工具、辅助程序和转换器 参见用法 尽管名声不佳，猪并非肮脏的动物。它们其实相当爱干净。猪之所以被视为肮脏，是因为它们喜欢在泥里打滚来降温。 我们称之为操作安全性。 猪的视力很差，但嗅觉极佳。猪用鼻子搜寻或拱地觅食。 我们称之为定向枚举。 猪是家畜中最聪明的动物之一，甚至比狗更聪明。 我们称之为态势感知。...

bofhound

THIS REPO IS NO LONGER ACTIVE ⛔🚧 This repo is no longer maintained. To submit an issue, pull request, or obtain the lastest version, reference https://github.com/coffeegist/bofhound 🚧⛔ | / / / | /| | | | / \ | | | | | \ | | | \ | | | | | | | | | | || | | | | | | | | | | | | | .--. | | | | | | | |...

cleanldap

CleanLdap 用于通过 AD WS 执行隐蔽 LDAP 查询的 BOF 参数 直接切入正题，以下是参数及其含义： Z: DC Hostname "dc01.example.com" Z: LDAP query "objectClass=" Z: Comma separated list of LDAP attributes "samaccountname,distinguishedName,cn" - if empty, collect all Z: Base DN "DC=example,DC=com" - if empty parse from hostname Z: Max...

ACLight

ACLight 用于高级发现特权账户的工具 - 包括影子管理员（Shadow Admins）。 ACLight2 是该工具的改进版本。 影子管理员研究 该工具（版本1）作为"影子管理员"研究的一部分发布——关于"影子管理员"的更多详情请见博文：https://www.cyberark.com/threat-research-blog/shadow-admins-stealthy-accounts-fear 该研究也曾在伦敦InfoSecurity大会上展示：演示链接 概览 ACLight 是一款通过高级 ACL 分析（对象 ACL——访问控制列表，亦称...

GetLAPSPassword

GetLAPSPassword Un intento mediocre de escribir una herramienta de volcado de LAPS que soporta autenticación tanto NTLM como Kerberos utilizando la librería impacket. La estructura inicial de esta herramienta fue tomada del ejemplo de impacket GetADUsers.py...

OneLogicalMyth_Shell

OneLogicalMythShell Este shell HTA fue creado para ayudar en evaluaciones de breakout. Lo construí hace más de un año inicialmente y pensé que a otros les podría resultar útil, así que ahora lo he hecho público. No dudes en enviar pull requests. Características Explorador de archivos Listar...

CVE-2026-4256

Improper neutralization of special elements used in an LDAP query 'LDAP injection' vulnerability in PEAKUP Technology Inc. PassGate allows LDAP Injection. This issue affects PassGate: through 30042026...

EUVD-2026-42586

Improper neutralization of special elements used in an LDAP query 'LDAP injection' vulnerability in PEAKUP Technology Inc. PassGate allows LDAP Injection. This issue affects PassGate: through 30042026...

CVE-2026-44063: Improper Neutralization of Special Elements used in an LDAP Query

An LDAP injection vulnerability in Netatalk 2.1.0 through 4.4.2 allows a remote authenticated attacker to manipulate LDAP queries and obtain limited information or modify LDAP entries via crafted filter input...

CVE-2026-33609

A flaw was found in PowerDNS. When running with 8bit-dns enabled, incomplete escaping of Lightweight Directory Access Protocol LDAP queries allows authenticated users to perform queries of internal domain subtrees. This vulnerability can lead to information disclosure, potentially exposing...

CVE-2026-40459

PAC4J is vulnerable to LDAP Injection in multiple methods. A low-privileged remote attacker can inject crafted LDAP syntax into ID-based search parameters, potentially resulting in unauthorized LDAP queries and arbitrary directory operations. This issue was fixed in PAC4J versions 4.5.10, 5.7.10...

Bouncy Castle Java 安全漏洞

Bouncy Castle Java is an open-source encryption algorithm developed by Legion of the Bouncy Castle Inc. Versions of Bouncy Castle Java prior to 1.84 contained security vulnerabilities, which were caused by improper handling of special elements in LDAP queries. These vulnerabilities could lead to...

EUVD-2006-6537

Malware in sbrugna...

EUVD-2014-5995

Malware in sbrugna...

EUVD-2021-26962

Malware in sbrugna...

EUVD-2022-29542

Malicious code in bioql PyPI...

CVE-2021-33668

Due to improper input sanitization, specially crafted LDAP queries can be injected by an unauthenticated user. This could partially impact the confidentiality of the application...

Adobe RoboHelp Server resolveDistinguishedName LDAP Injection Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe RoboHelp Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the resolveDistinguishedName method. The issue results from the lack of...

October 10, 2023—KB5031411 (Security-only update)

None None...

ForgeRock Access Management 6.0.0.x / 6.5.0.x / 6.5.2.x / 6.5.3 / 6.5.4 / 7.0.x / 7.1 / 7.1.1 Multiple Vulnerabilities

The version of ForgeRock Access Management detected on the remote host is affected by multiple vulnerabilities, including the following: - It may be possible to gain some details of the deployment through a well-crafted attack. This may allow that data to be used to probe internal network service...