CVE-2026-47840

A network attacker positioned between UAA and its LDAP directory can impersonate the directory using any certificate from any trusted CA, then harvest the LDAP bind password and every end-user password sent during simple-bind authentication, and return forged group memberships that grant themselv...

Password Harvest

Extract saved passwords from browser autofill by revealing hidden password fields from kittysploit import import json import time class ModuleBrowserAuxiliary: info = "name": "Password Harvest", "description": "Extract saved passwords from browser autofill by revealing hidden password fields",...