52 matches found
TruffleSnout
TruffleSnout Iteratives AD-Erkennungs-Toolkit für offensive Betreiber. Situationsbewusstsein und gezielte, rauscharme Aufzählung. Vorliebe für OpSec. Entdecken: Forests and Trusts Domains and Trusts GCs/DCs AD durchsuchen und abfragen: Nach Objekten und Daten Grenzen, um das Auslösen von defensiv...
ACLight
ACLight Uno strumento per la scoperta avanzata di Account Privilegiati - inclusi gli Shadow Admin. ACLight2 è la versione migliorata dello strumento. Ricerca sugli Shadow Admin Lo strumento versione 1 è stato pubblicato come parte della ricerca "Shadow Admins" - maggiori dettagli sugli "Shadow...
bofhound
THIS REPO IS NO LONGER ACTIVE ⛔🚧 This repo is no longer maintained. To submit an issue, pull request, or obtain the lastest version, reference https://github.com/coffeegist/bofhound 🚧⛔ root@kitploit: | / / / | /| | | | / \ | | | | | \ | | | \ | | | | | | | | | | || | | | | | | | | | | | | | .--. ...
GetLAPSPassword
GetLAPSPassword Un tentativo modesto di scrivere uno strumento di dumping LAPS che supporta sia l'autenticazione NTLM che Kerberos utilizzando la libreria impacket. La struttura iniziale di questo strumento è stata presa dall'esempio impacket GetADUsers.py...
OneLogicalMyth_Shell
OneLogicalMythShell यह HTA शेल ब्रेकआउट मूल्यांकन में सहायता के लिए बनाया गया था। मैंने इसे शुरू में एक वर्ष से अधिक समय पहले बनाया था और सोचा कि दूसरों को यह उपयोगी लग सकता है, इसलिए अब इसे सार्वजनिक कर दिया है। कृपया बेझिझक पुल रिक्वेस्ट सबमिट करें। विशेषताएँ फ़ाइल एक्सप्लोरर ड्राइव्स सूचीबद्ध...
cleanldap
CleanLdap BOF per eseguire query LDAP furtive su AD WS Argomenti Vado dritto al punto: ecco gli argomenti e il loro significato: root@kitploit: Z: DC Hostname "dc01.example.com" Z: LDAP query "objectClass=" Z: Comma separated list of LDAP attributes "samaccountname,distinguishedName,cn" - if empt...
CVE-2026-4256
Improper neutralization of special elements used in an LDAP query 'LDAP injection' vulnerability in PEAKUP Technology Inc. PassGate allows LDAP Injection. This issue affects PassGate: through 30042026...
EUVD-2026-42586
Improper neutralization of special elements used in an LDAP query 'LDAP injection' vulnerability in PEAKUP Technology Inc. PassGate allows LDAP Injection. This issue affects PassGate: through 30042026...
CVE-2026-33609
A flaw was found in PowerDNS. When running with 8bit-dns enabled, incomplete escaping of Lightweight Directory Access Protocol LDAP queries allows authenticated users to perform queries of internal domain subtrees. This vulnerability can lead to information disclosure, potentially exposing...
CVE-2026-40459
PAC4J is vulnerable to LDAP Injection in multiple methods. A low-privileged remote attacker can inject crafted LDAP syntax into ID-based search parameters, potentially resulting in unauthorized LDAP queries and arbitrary directory operations. This issue was fixed in PAC4J versions 4.5.10, 5.7.10...
Bouncy Castle Java 安全漏洞
Bouncy Castle Java is an open-source encryption algorithm developed by Legion of the Bouncy Castle Inc. Versions of Bouncy Castle Java prior to 1.84 contained security vulnerabilities, which were caused by improper handling of special elements in LDAP queries. These vulnerabilities could lead to...
EUVD-2006-6537
Malware in sbrugna...
EUVD-2021-26962
Malware in sbrugna...
EUVD-2014-5995
Malware in sbrugna...
EUVD-2022-29542
Malicious code in bioql PyPI...
CVE-2021-33668
Due to improper input sanitization, specially crafted LDAP queries can be injected by an unauthenticated user. This could partially impact the confidentiality of the application...
Adobe RoboHelp Server resolveDistinguishedName LDAP Injection Information Disclosure Vulnerability
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe RoboHelp Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the resolveDistinguishedName method. The issue results from the lack of...
October 10, 2023—KB5031411 (Security-only update)
None None...
ForgeRock Access Management 6.0.0.x / 6.5.0.x / 6.5.2.x / 6.5.3 / 6.5.4 / 7.0.x / 7.1 / 7.1.1 Multiple Vulnerabilities
The version of ForgeRock Access Management detected on the remote host is affected by multiple vulnerabilities, including the following: - It may be possible to gain some details of the deployment through a well-crafted attack. This may allow that data to be used to probe internal network service...