27 matches found
Get-RBCD-Threaded
Get-RBCD-Threaded ç¨äşĺ¨ Active Directory çŻĺ˘ä¸ĺç°ĺşäşčľćşç續ćĺ§ć´žćťĺťčˇŻĺžçĺˇĽĺ ˇ ĺ äšĺŽĺ ¨ĺşäşä¸¤çŻç˛žĺ˝Šçĺ厢ćçŤ ďź"Wagging the Dog: Abusing Resource-Based Constrained Delegation to Attack Active Directory"ďźä˝č Elad Shamirďźĺ "A Case Study in Wagging the Dog: Computer Takeover"ďźä˝č harmj0yďźă诡é 话čżä¸¤çŻĺ厢ćçŤ äťĽçćŁç解čżéĺççä¸ĺă说ĺŽčŻďźćčŞĺˇąäšĺŞćŻä¸çĽĺ解ďźčżĺˇ˛çťĺžć ˇć ¨äşďź...
rbcd-attack
Abusing Kerberos Resource-Based Constrained Delegation TL;DR This repo is about a practical attack against Kerberos Resource-Based Constrained Delegation in a Windows Active Directory Domain. The difference from other common implementations is that we are launching the attack from outside of the...
Craft CMS ĺŽĺ ¨ćźć´
Craft CMS is an open-source content management system developed by Craft CMS. Versions prior to 4.17.8 and 5.9.14 of Craft CMS had security vulnerabilities. These vulnerabilities stemmed from the lack of enforceable authorization checks for resource-based access control, which could allow...
TGT2Admin-
đ RBCDExploit - Resource-Based Constrained Delegation Attack...
Exploit for Improper Certificate Validation in Microsoft
CVE-2022-26923 â Certifried Exploit AD CS Abuse Automatisat...
CVE-2025-64102
Zitadel is open-source identity infrastructure software. Prior to 4.6.0, 3.4.3, and 2.71.18, an attacker can perform an online brute-force attack on OTP, TOTP, and passwords. While Zitadel allows preventing online brute force attacks in scenarios like TOTP, Email OTP, or passwords using a lockout...
CVE-2025-64102 Zitadel allows brute-forcing authentication factors
Zitadel is open-source identity infrastructure software. Prior to 4.6.0, 3.4.3, and 2.71.18, an attacker can perform an online brute-force attack on OTP, TOTP, and passwords. While Zitadel allows preventing online brute force attacks in scenarios like TOTP, Email OTP, or passwords using a lockout...
CVE-2025-64102
CVE-2025-64102 affects Zitadel, allowing online brute-force attacks on OTP, TOTP and passwords in multiple branches prior to fixed releases. Public details specify vulnerable ranges: 4.x up to 4.4.x, 3.x up to 3.4.2 (RCs included), and 2.x up to 2.71.17, with fixes enforcing a lockout policy and ...
EUVD-2023-36810
Malicious code in bioql PyPI...
EUVD-2023-50493
Malicious code in bioql PyPI...
CVE-2023-46266
An attacker can send a specially crafted request which could lead to leakage of sensitive data or potentially a resource-based DoS attack...
CVE-2023-32566
An attacker can send a specially crafted request which could lead to leakage of sensitive data or potentially a resource-based DoS attack. Fixed in version 6.4.1...
Metasploit Wrap-Up 03/21/2025
SMB to LDAP Relay This week, the Metasploit team have added an exciting relay module that has been in the works for a long time. This relay module is used to host an SMB server, and execute an SMB to LDAP relay attack against a Domain controller with an LDAP server when NTLMv1 is being used as th...
CVE-2021-22962
An attacker can send a specially crafted request which could lead to leakage of sensitive data or potentially a resource-based DoS attack...
CVE-2023-32565
An attacker can send a specially crafted request which could lead to leakage of sensitive data or potentially a resource-based DoS attack. Fixed in version 6.4.1...
Design/Logic Flaw
An attacker can send a specially crafted request which could lead to leakage of sensitive data or potentially a resource-based DoS attack. Fixed in version 6.4.1...
CVE-2023-32566
An attacker can send a specially crafted request which could lead to leakage of sensitive data or potentially a resource-based DoS attack. Fixed in version 6.4.1...
CVE-2023-32565
An attacker can send a specially crafted request which could lead to leakage of sensitive data or potentially a resource-based DoS attack. Fixed in version 6.4.1...
CVE-2023-32565
An attacker can send a specially crafted request which could lead to leakage of sensitive data or potentially a resource-based DoS attack. Fixed in version 6.4.1...
Detecting and preventing privilege escalation attacks leveraging Kerberos relaying (KrbRelayUp)
On April 24, 2022, a privilege escalation hacking tool, KrbRelayUp, was publicly disclosed on GitHub by security researcher Mor Davidovich. KrbRelayUp is a wrapper that can streamline the use of some features in Rubeus, KrbRelay, SCMUACBypass, PowerMad/SharpMad, Whisker, and ADCSPwn tools in...