19 matches found
GPOddity
GPOddity GPOddity 项目旨在通过 NTLM 中继（及其他方式）实现 GPO 攻击向量的自动化。 有关攻击的更多详细信息以及如何使用该工具的演示，请参阅相关文章： https://www.synacktiv.com/publications/gpoddity-exploiting-active-directory-gpos-through-ntlm-relaying-and-more 安装 Pipx 你可以通过以下命令使用 pipx 安装 GPOddity： $ python3 -m pipx install...
PKINITtools
Herramientas PKINIT Este repositorio contiene algunas utilidades para jugar con PKINIT y certificados. Las herramientas están construidas sobre minikerberos e impacket. Artículo de blog adjunto con más contexto: https://dirkjanm.io/ntlm-relaying-to-ad-certificate-services/ Instalación Estas...
ADFSRelay
Resumen Este repositorio incluye dos utilidades: NTLMParse y ADFSRelay. NTLMParse es una utilidad para decodificar mensajes NTLM codificados en base64 e imprimir información sobre las propiedades y campos subyacentes dentro del mensaje. Examinar estos mensajes NTLM es útil al investigar el...
CVE-2026-0522
A local file inclusion vulnerability in the upload/download flow of the VertiGIS FM application allows authenticated attackers to read arbitrary files from the server by manipulating a file's path during its upload. When the file is subsequently downloaded, the file in the attacker controlled pat...
CVE-2026-0522: Externally Controlled Reference to a Resource in Another Sphere
A local file inclusion vulnerability in the upload/download flow of the VertiGIS FM application allows authenticated attackers to read arbitrary files from the server by manipulating a file's path during its upload. When the file is subsequently downloaded, the file in the attacker controlled pat...
EUVD-2023-51409
Malicious code in bioql PyPI...
CVE-2023-50916: Improper Limitation of a Pathname to a Restricted Directory
Kyocera Device Manager before 3.1.1213.0 allows NTLM credential exposure during UNC path authentication via a crafted change from a local path to a UNC path. It allows administrators to configure the backup location of the database used by the application. Attempting to change this location to a...
CVE-2023-47279
In Delta Electronics InfraSuite Device Master v.1.0.7, A vulnerability exists that allows an unauthenticated attacker to disclose user information through a single UDP packet, obtain plaintext credentials, or perform NTLM relaying...
Design/Logic Flaw
In Delta Electronics InfraSuite Device Master v.1.0.7, A vulnerability exists that allows an unauthenticated attacker to disclose user information through a single UDP packet, obtain plaintext credentials, or perform NTLM relaying...
CVE-2023-47279
Delta Electronics InfraSuite Device Master (version 1.0.7) is affected by CVE-2023-47279, a path traversal-related vulnerability permitting an unauthenticated attacker to disclose user information, obtain plaintext credentials, or perform NTLM relaying through a single UDP packet. This vulnerabil...
CVE-2023-47279 Delta Electronics InfraSuite Device Master Path Traversal
In Delta Electronics InfraSuite Device Master v.1.0.7, A vulnerability exists that allows an unauthenticated attacker to disclose user information through a single UDP packet, obtain plaintext credentials, or perform NTLM relaying...
CVE-2023-47279 Delta Electronics InfraSuite Device Master Path Traversal
In Delta Electronics InfraSuite Device Master v.1.0.7, A vulnerability exists that allows an unauthenticated attacker to disclose user information through a single UDP packet, obtain plaintext credentials, or perform NTLM relaying...
CVE-2023-47279: Improper Limitation of a Pathname to a Restricted Directory
In Delta Electronics InfraSuite Device Master v.1.0.7, A vulnerability exists that allows an unauthenticated attacker to disclose user information through a single UDP packet, obtain plaintext credentials, or perform NTLM relaying...
ADFSRelay - Proof Of Concept Utilities Developed To Research NTLM Relaying Attacks Targeting ADFS
This repository includes two utilities NTLMParse and ADFSRelay. NTLMParse is a utility for decoding base64-encoded NTLM messages and printing information about the underlying properties and fields within the message. Examining these NTLM messages is helpful when researching the behavior of a...
Lsarelayx - NTLM Relaying For Windows Made Easy
lsarelayx is system wide NTLM relay tool designed to relay incoming NTLM based authentication to the host it is running on. lsarelayx will relay any incoming authentication request which includes SMB. Since lsarelayx hooks into existing application authentication flows, the tool will also attempt...
Remote Potato – From Domain User to Enterprise Admin
NTLM Relaying is an well-known technique that was mainly used in security assessments in order to establish some sort of foothold on a server in… Continue reading - Remote Potato - From Domain User to Enterprise Admin...
Remote Potato – From Domain User to Enterprise Admin
NTLM Relaying is an well-known technique that was mainly used in security assessments in order to establish some sort of foothold on a server in… Continue reading - Remote Potato - From Domain User to Enterprise Admin...
