123 matches found
LDAPPER
Introduction 本工具旨在解决我在使用 ldapsearch 以及与 AD 交互过程中遇到的许多问题。具体来说，该工具解决了以下我遇到过的痛点： 1. 无法从 AD 返回超过一千个结果。本工具支持 LDAP 记录分页，并绕过了其他 AD 缺陷，允许检索任意数量的记录。 2. 无法以直观的方式使用 NTLM 凭据进行身份验证。您可以提供 NETBIOS 域名、用户名和密码来向 Windows DC 进行身份验证。 3. 无法精确控制返回的记录数量、返回速度以及每次拉取的记录数。本工具允许您控制所有这些参数，包括在每次分页调用之间添加延迟。此外，可以指定多个 DC 以实现轮询查询。...
sopa
sopa 一个用 Golang 编写的 ADWS 实用客户端。 Sopa 实现了 ADWS 协议栈（MS-NNS + MC-NMF + SOAP），提供了以下命令行功能： 对象搜索与检索 query: 通过 WS-Enumeration 的 Enumerate + Pull 循环运行 LDAP 过滤器搜索，支持属性投影、作用域控制（Base/OneLevel/Subtree）和分页 get: 通过 WS-Transfer Get 根据 DN 获取单个对象 对象生命周期 create: 通过 WS-Transfer ResourceFactory 创建对象（内置类型：user,...
SharpShares
SharpShares 多线程C .NET程序集，用于枚举域中可访问的网络共享 基于 djhohnstein 的 SharpShares 项目 root@kitploit: .\SharpShares.exe help Usage: SharpShares.exe /threads:50 /ldap:servers /ou:"OU=Special Servers,DC=example,DC=local" /filter:SYSVOL,NETLOGON,IPC$,PRINT$ /verbose /outfile:C:\path\to\file.txt Optional Arguments:...
reconerator
概述 这是一个自定义的 .NET 程序集，用于执行一系列态势感知活动。目前包含以下功能集： BASIC - 从磁盘和注册表获取信息。 LDAP - 允许执行自定义的 AD LDAP 查询。 RESOLVEHOST - 执行 DNS 查询解析。 INDEXSEARCH - 搜索 Windows 索引服务中的本地文件和电子邮件（按文件名和内容）。 PROXYCHECK - 显示访问指定 URL 时将使用的代理服务器。 我在编写此工具时并不知道 GhostPack 正在开发中；最终我们几乎同时发布了各自的工具。实际上，GhostPack 现在的功能要丰富得多。我已移除 PrivescCheck...
ActiveReign
ActiveReign ⚠️ 感谢您的支持。本项目不再公开维护。 背景 不久前，我接到了一个挑战：用 Python3 编写一个发现工具，能够自动化查找网络文件共享上的敏感信息。在用 pysmb 完整编写了该工具，并添加了诸如打开和扫描 docx 与 xlsx 文件的功能之后，我开始逐步集成优秀的 Impacket 库中的功能——仅是我希望在内部渗透测试工具中看到的简单特性。添加的功能越多，它看起来就越像从头重写的 CrackMapExec 的 Python3 版本。 如果直接进行比较，CME 是一个出色的工具，其功能远多于当前实现。不过，我添加了一些新功能和修改，可能会在评估过程中派上用场...
ADSearch
ADSearch 一个为 cobalt-strike 的 execute-assembly 命令编写的工具，用于更高效地查询 AD。 主要功能 列出所有域管理员 自定义 LDAP 搜索 连接到 LDAPS 服务器 从 AD 实例输出 JSON 数据 从通用查询中检索自定义属性（例如所有计算机） 用法 root@kitploit: ADSearch 1.0.0.0 Copyright c 2020 USAGE: 远程或本地查询 Active Directory： ADSearch --domain ldap.example.com --password AdminPass1...
CVE-2026-76373
In AD LDAP app for Splunk SOAR versions below 2.3.8, a low-privilege user can inject crafted input into Active Directory queries via action parameters, enabling enumeration of accounts/groups/OUs, reading sensitive attributes from arbitrary objects, and redirecting account-modification actions. C...
CVE-2026-76373 Filter Injection through Action Parameters in AD LDAP app for Splunk SOAR
In versions below 2.3.8 of the AD LDAP app for Splunk SOAR, a user who holds a role with permission to run actions could inject crafted input into an Active Directory query to enumerate Active Directory objects, including accounts, groups, and organizational units, read sensitive attributes from...
bouncycastle: BC-JAVA: LDAP injection vulnerability in LDAPStoreHelper.java
A flaw was found in Legion of the Bouncy Castle Inc. BC-JAVA bcprov. The LDAPStoreHelper implementation fails to properly neutralize special elements in user-supplied input before incorporating them into LDAP queries. This allows a remote attacker to execute an LDAP injection attack by supplying...
BIT-MONGODB-2026-9751 Sensitive data could be written to mongod.log
The ldapQueryPassword parameter, when set through the runtime setParameter command, will log the new password to the mongod.log file in plain text...
UBUNTU-CVE-2026-9751
The ldapQueryPassword parameter, when set through the runtime setParameter command, will log the new password to the mongod.log file in plain text...
PT-2026-48301
Name of the Vulnerable Software and Affected Versions MongoDB affected versions not specified Description The ldapQueryPassword parameter, when configured using the runtime setParameter command, causes the new password to be recorded in plain text within the mongod.log file. Recommendations At th...
SUSE-SU-2026:21208-1 Security update for dovecot24
This update for dovecot24 fixes the following issues: - Update to v2.4.3 - CVE-2025-59028: Invalid base64 authentication can cause DoS for other logins bsc1260894. - CVE-2025-59031: decode2text.sh OOXML extraction may follow symlinks and read unintended files during indexing bsc1260895. -...
OPENSUSE-SU-2026:20554-1 Security update for dovecot24
This update for dovecot24 fixes the following issues: - Update to v2.4.3 - CVE-2025-59028: Invalid base64 authentication can cause DoS for other logins bsc1260894. - CVE-2025-59031: decode2text.sh OOXML extraction may follow symlinks and read unintended files during indexing bsc1260895. -...
CVE-2026-25560
WeKan versions prior to 8.19 contain an LDAP filter injection vulnerability in LDAP authentication. User-supplied username input is incorporated into LDAP search filters and DN-related values without adequate escaping, allowing an attacker to manipulate LDAP queries during authentication...
MiracleLinux 7 : java-1.8.0-openjdk-1.8.0.161-0.b14.el7 (AXSA:2018-2516:01)
The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2018-2516:01 advisory. Multiple flaws were found in the Hotspot and AWT components of OpenJDK. An untrusted Java application or applet could use these flaws to bypass...
EUVD-2005-2302
Malware in sbrugna...
EUVD-2021-20345
Malware in sbrugna...