1450 matches found
andriller
Andriller CE Community Edition Andrillerは、スマートフォン向けのフォレンジックツールを集めたソフトウェアユーティリティです。Androidデバイスから読み取り専用で、フォレンジック的に健全で、非破壊的な取得を実行します。パターン、PINコード、またはパスワードの強力なロック画面クラッキング、Android（一部のApple iOSおよびWindows）データベースからのアプリデータのカスタムデコーダー（通信のデコード用）などの機能があります。抽出とデコーダーはHTMLおよびExcel形式でレポートを生成します。 機能 自動データ抽出とデコード...
Change-Lockscreen
Change-Lockscreen Change-Lockscreen 是一款通过命令行更改 Windows 锁屏图像，以 SYSTEM 身份触发网络身份验证，从而执行权限提升攻击的工具，例如下面链接文章中所描述的攻击方式： https://research.nccgroup.com/2019/08/20/kerberos-resource-based-constrained-delegation-when-an-image-change-leads-to-a-privilege-escalation 功能 默认情况下，Windows 10 具有一项名为 Windows Spotligh...
nosferatu
nosferatu Windows NTLM/Kerberos Authentication Backdoor How it Works First, the DLL is injected into the lsass.exe process, and will begin hooking authentication WinAPI calls. The targeted functions are: NTLM: NtlmShared!MsvpPasswordValidate Kerberos: cryptdll!CDLocateCSystem Kerberos:...
CVE-2022-26629
锁屏绕过 CVE-2022-26629 受影响的产品 SoroushPlus+ Messenger 1.0.30 漏洞类型 不当的访问控制 影响 锁屏绕过 摘要 对权限和特权不足的处理不当，允许攻击者修改并覆盖锁屏功能，从而在未经任何授权的情况下绕过锁屏。 利用 BypassLockScreen.py 自动利用 PoC 1. 将 BypassLockScreen.py 放置到你的 SoroushPlus+ 安装目录中， 2. 运行 Python3 BypassLockScreen.py。 测试环境 Windows Linux 演示...
lockphish
Lockphish v2.0 Lockphish it's the first tool 07/04/2020 for phishing attacks on the lock screen, designed to grab Windows credentials, Android PIN and iPhone Passcode using a https link. LockPhish Tutorial: https://www.kalilinux.in/2020/05/lockphish.html Author: The Linux Choice Who deleted his...
lockphish
Lockphish v2.0 Lockphishは、ロック画面へのフィッシング攻撃を目的とした初めてのツール（2020年4月7日）であり、Windowsの資格情報、AndroidのPIN、iPhoneのパスコードをHTTPSリンクを使用して取得するように設計されています。 LockPhish チュートリアル: https://www.kalilinux.in/2020/05/lockphish.html 著者: The Linux Choice（自身のGitHubリポジトリを削除した人物） Twitter: https://twitter.com/linuxchoice 機能:...
CVE-2025-56800
CVE-2025-56800 Vulnerabilidad de omisión de autenticación local en la aplicación de escritorio de Reolink 1. Resumen Nombre : Aplicación de escritorio de Reolink Versión : 8.18.12 Vendedor : Reolink CWE : CWE-290: Omisión de autenticación mediante suplantación CVSS : 5.1 MEDIO Cadena de vector :...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: gdm (UTSA-2026-093042)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093042 advisory. A flaw was found in GDM in versions prior to 3.38.2.1. A race condition in the handling of session shutdown makes it possible to bypass the lock screen for a user th...
Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: gnome-shell (UTSA-2026-032347)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-032347 advisory. It was discovered that the gnome-shell lock screen since version 3.15.91 did not properly restrict all contextual actions. An attacker with physical access to a lock...
TWINLOOT Abuses SharePoint and Teams to Steal Credentials and Move Across Networks
Cybersecurity researchers have disclosed details of a previously undocumented Python implant framework dubbed TWINLOOT. "TWINLOOT is a modular, PyArmor-hardened Python implant designed to operate its entire command-and-control infrastructure inside trusted Microsoft services," Ontinue said in a...
CVE-2026-44964
In versions of the Datadog Android application prior to v545-5.9.2, OnCallNotificationActivity is declared exported with no permission guard. A co-installed application can launch it with attacker-controlled Intent extras, including a full-screen lock-screen message, an arbitrary on-call page ID,...
CVE-2026-44964
Summary: CVE-2026-44964 affects the Datadog Android app, where OnCallNotificationActivity is declared with android:exported="true" and no permission guard. This allows any co-installed app to launch the activity with attacker-controlled Intent extras (on_call_page_content, page_id, on_call_page_i...
EUVD-2026-54570
In versions of the Datadog Android application prior to v545-5.9.2, OnCallNotificationActivity is declared exported with no permission guard. A co-installed application can launch it with attacker-controlled Intent extras, including a full-screen lock-screen message, an arbitrary on-call page ID,...
CVE-2026-44964
In versions of the Datadog Android application prior to v545-5.9.2, OnCallNotificationActivity is declared exported with no permission guard. A co-installed application can launch it with attacker-controlled Intent extras, including a full-screen lock-screen message, an arbitrary on-call page ID,...
CVE-2026-64745
This issue was addressed with additional restrictions on the lock screen. This issue is fixed in macOS Sequoia 15.7.8, macOS Tahoe 26.6. A person with physical access to a locked device may be able to access contacts and photos...
EUVD-2026-49496
This issue was addressed with additional restrictions on the lock screen. This issue is fixed in macOS Sequoia 15.7.8, macOS Tahoe 26.6. A person with physical access to a locked device may be able to access contacts and photos...
CVE-2026-64745
This issue was addressed with additional restrictions on the lock screen. This issue is fixed in macOS Sequoia 15.7.8, macOS Tahoe 26.6. A person with physical access to a locked device may be able to access contacts and photos...
CVE-2026-64745
This issue was addressed with additional restrictions on the lock screen. This issue is fixed in macOS Sequoia 15.7.8, macOS Tahoe 26.6. A person with physical access to a locked device may be able to access contacts and photos...
PT-2026-65277
Name of the Vulnerable Software and Affected Versions macOS Sequoia versions prior to 15.7.8 macOS Tahoe versions prior to 26.6 Description A person with physical access to a locked device may be able to access contacts and photos due to insufficient restrictions on the lock screen. Recommendatio...
