pretender

pretender 你的中间人攻击搭档，用于通过DHCPv6 DNS接管以及mDNS、LLMNR和NetBIOS-NS欺骗进行中继攻击 pretender 是由 RedTeam Pentesting 开发的工具，用于通过伪造的本地名称解析和 DHCPv6 DNS 接管攻击获取中间人位置。pretender 主要针对 Windows 主机，因为它旨在用于中继攻击，但可以部署在 Linux、Windows 以及 Go 支持的所有其他平台上。名称解析查询可以用任意 IP 地址进行应答，适用于中继工具运行在与 pretender 不同主机上的情况。它设计用于与 Impacket's...

CVE-2023-50916

Kyocera Device Manager before 3.1.1213.0 allows NTLM credential exposure during UNC path authentication via a crafted change from a local path to a UNC path. It allows administrators to configure the backup location of the database used by the application. Attempting to change this location to a...

CVE-2023-50916

Kyocera Device Manager before 3.1.1213.0 allows NTLM credential exposure during UNC path authentication via a crafted change from a local path to a UNC path. It allows administrators to configure the backup location of the database used by the application. Attempting to change this location to a...

Cisco CallManager / OpenSer authentication relaying attacks

Insufficient Digest authentication validation allows active man-in-the-middle to access resources unrequested by client...

Windows NTLM relaying attacks

Some client program use NTLM authentication with user's permission without user request. It may leak to NTLM credentials and perform choosen challenge attack and comprometation of server's with client credentials by relaying NTLM request...