imposter

IMPOSTER 不正ネットワーク上のWindowsクライアントを攻撃するためのペンテストツール。 現在のバージョン 機能 LDAP認証をNTLM認証にダウングレード ネットワークロケーション認識を欺くためにドメインコントローラの初期ステップを偽装 サーバー DNS, CLDAP, LDAP セットアップ 現在のバージョンはKali Linuxでテストされていますが、他のオペレーティングシステムでも動作するはずです。 依存関係 pyasn1 dnspython Kali Linuxでのクイックセットアップ Kali...

New Wi-Fi Vulnerability Enables Network Eavesdropping via Downgrade Attacks

Researchers have discovered a new security vulnerability stemming from a design flaw in the IEEE 802.11 Wi-Fi standard that tricks victims into connecting to a less secure wireless network and eavesdrop on their network traffic. The SSID Confusion attack, tracked as CVE-2023-52424, impacts all...

PT-2024-3664

Name of the Vulnerable Software and Affected Versions IEEE 802.11 standard affected versions not specified Description The issue is related to the IEEE 802.11 standard, which sometimes enables an adversary to trick a victim into connecting to an unintended or untrusted network. This occurs becaus...

CVE-2021-23281

Eaton Intelligent Power Manager IPM prior to 1.69 is vulnerable to unauthenticated remote code execution vulnerability. IPM software does not sanitize the date provided via coverterCheckList action in metadriversrv.js class. Attackers can send a specially crafted packet to make IPM connect to rou...

CVE-2021-23281

Eaton Intelligent Power Manager IPM prior to 1.69 is vulnerable to unauthenticated remote code execution vulnerability. IPM software does not sanitize the date provided via coverterCheckList action in metadriversrv.js class. Attackers can send a specially crafted packet to make IPM connect to rou...