adiskreader-secretsdump

🚩 赞助商 如果你喜欢这个项目，请考虑购买 OctoPwn 的许可证，这是我们运行在浏览器中的完整渗透测试套件！ 有关新构建/版本和其他信息的通知，请加入我们的 Discord adiskreader-secretsdump 从本地或远程磁盘映像中提取注册表和 NTDS 机密 🚩 在浏览器中运行 该项目与许多其他渗透测试工具一起，借助 OctoPwn 的强大功能在浏览器中运行！ 在 OctoPwn - Live 查看社区版 安装 git clone 然后 pip install . 用法 首先，你必须从此处手动安装 adiskreader 项目，因为它尚未打包到 pip 上。...

CVE-2026-55998

The CVE describes an unauthenticated import endpoint vulnerability: /v3/import/{token}_{clusterId}.yaml returns 502 for valid cluster IDs that reference clusters with private registry secrets due to a null pointer dereference in pkg/systemtemplate/private_registry.go ; non-existent cluster IDs re...

CVE-2026-55998 Cluster Existence Oracle via Unauthenticated Import Endpoint

The endpoint /v3/import/tokenclusterId.yaml retrieves the cluster object before validating the token. When a valid cluster ID references a cluster that has private registry secrets configured, a nil pointer dereference in pkg/systemtemplate/privateregistry.go causes the request to return HTTP 502...

EUVD-2026-53258

The endpoint /v3/import/tokenclusterId.yaml retrieves the cluster object before validating the token. When a valid cluster ID references a cluster that has private registry secrets configured, a nil pointer dereference in pkg/systemtemplate/privateregistry.go causes the request to return HTTP 502...

CVE-2021-23207

An attacker with physical access to the host can extract the secrets from the registry and create valid JWT tokens for the Fresenius Kabi Vigilant MasterMed version 2.0.1.3 application and impersonate arbitrary users. An attacker could manipulate RabbitMQ queues and messages by impersonating user...