wodat

wodat Windows Oracle 데이터베이스 공격 도구 인기 있는 Oracle Database Attack Tool ODAT https://github.com/quentinhardy/odat의 간단한 포트로, C .Net Framework로 제작되었습니다. 크레딧: https://github.com/quentinhardy/odat - 그의 코드 대부분을 포팅했습니다. 비밀번호 기반 공격 수행 예: 사용자 이름을 비밀번호로 사용, 주어진 비밀번호에 대한 사용자 이름 목록, 주어진 사용자 이름에 대한 비밀번호 목록, 사용자...

evtx

EVTX A cross-platform parser for the Windows XML EventLog format Features 🔒 Implemented using 100% safe rust - and works on all platforms supported by rust that have stdlib. ⚡ Fast - see benchmarks below. It's faster than any other implementation by orders of magnitude! 🚀 Multi-threaded. ✨ Suppor...

CVE-2020-0665

CVE-2020-0665 - SID 필터 우회 CVE-2020-0665에 대한 개념 증명으로, Active Directory 포리스트에서 SID 필터링을 우회할 수 있게 합니다 교차 포리스트 공격. 공격 요구 사항 대상 도메인 컨트롤러 머신은 2020년 2월 이후에 패치되지 않아야 합니다. 신뢰하는 포리스트의 도메인 컨트롤러를 사전에 장악해야 합니다 이 공격은 SYSTEM 사용자와 같은 높은 권한이 필요합니다. 신뢰하는 포리스트와 양방향 전이 신뢰 관계가 설정되어 있어야 합니다. 장악된 DC에 python2.7이 설치되어 있어...

CVE-2024-3495-POC

CVE-2024-3495-POC Country State City Dropdown CF7 WordPressプラグイン（バージョン2.7.2まで）は、「cnt」および「sid」パラメータを介したSQLインジェクションに対して脆弱です。SQLクエリにおける不十分なエスケープ処理とプリペアドステートメントの欠如により、認証されていない攻撃者がクエリを追加し、機密データベース情報を抽出する可能性があります。...

pulledpork

PulledPork PulledPork for Snort and Suricata rule management from Google code Find us on Libera.Chat IRC pulledpork Copyright C 2009-2021 JJ Cummings, Michael Shirk and the PulledPork Team! Thank you for choosing to use PulledPork! This file provides some basic guidance on the usage of PulledPork...

zBang

zBang은 스캔된 네트워크에서 잠재적인 권한 계정 위협을 탐지하는 특수 위험 평가 도구입니다. 조직 및 레드팀은 zBang을 활용하여 잠재적인 공격 벡터를 식별하고 네트워크의 보안 태세를 개선할 수 있습니다. 결과는 그래픽 인터페이스 또는 원시 출력 파일 검토를 통해 분석할 수 있습니다. zBang에 대한 자세한 내용은 @Hechtov의 Big zBang Theory 블로그 게시물에서 확인할 수 있습니다:...

Invoke-SessionHunter

Invoke-SessionHunter 원격 컴퓨터에서 활성 사용자 세션에 대한 정보를 검색하고 표시합니다. 관리자 권한이 필요하지 않습니다. 이 도구는 원격 레지스트리 서비스를 활용하여 원격 컴퓨터의 HKEYUSERS 레지스트리 하이브를 쿼리합니다. 활성 사용자 세션과 관련된 SID보안 식별자를 식별 및 추출하고, 이를 해당 사용자 이름으로 변환하여 현재 로그인한 사용자에 대한 정보를 제공합니다. -CheckAdminAccess 스위치가 제공되면 Invoke-WMIRemoting을 사용하여 로컬 관리자 권한이 있는 대상에 인증...

GlobalUnProtect

GlobalUnProtect PoC tool per decrittare e raccogliere configurazione, cookie e file HIP di GlobalProtect da installazioni client Windows. Post del blog: https://rotarydrone.medium.com/4a1d8fc7773e Utilizzo Eseguire come standalone o in-memory tramite execute-assembly o equivalente. Raccoglie tutt...

CVE-2026-81576

If configured as a server, CodeMeter Runtime before versions 8.41a and 9.10 issues handles per connection and relies on a cryptographically weak SID as sole authenticator. An attacker can brute-force the SID, recover another session's handle number, and read license information belonging to anoth...

CVE-2026-81576 Improper Authentication of Session Handles

If configured as a server, CodeMeter Runtime before versions 8.41a and 9.10 issues handles per connection and relies on a cryptographically weak SID as sole authenticator. An attacker can brute-force the SID, recover another session's handle number, and read license information belonging to anoth...

EUVD-2026-66983

If configured as a server, CodeMeter Runtime before versions 8.41a and 9.10 issues handles per connection and relies on a cryptographically weak SID as sole authenticator. An attacker can brute-force the SID, recover another session's handle number, and read license information belonging to anoth...

CVE-2026-81576 Improper Authentication of Session Handles

If configured as a server, CodeMeter Runtime before versions 8.41a and 9.10 issues handles per connection and relies on a cryptographically weak SID as sole authenticator. An attacker can brute-force the SID, recover another session's handle number, and read license information belonging to anoth...

CVE-2026-81576

CodeMeter Runtime (WIBU), when configured as a server in versions before 8.41a and 9.10 , issues a per-connection session handle and relies on a cryptographically weak SID as the sole authenticator. An attacker with network access can brute-force the SID , recover another session's handle number,...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Networking: dsa: mv88e6xxx: Fix –ENOENT when deleting VLANs and MST is not supported. Russell King reported that on version ZII dev rev B, deleting a bridge VLAN from a user port results in the error –ENOENT:...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ksmbd: An out-of-bounds access issue in parsesecdesc has been fixed. If osidoffset, gsidoffset, and dacloffset can be greater than smbntsdstruct.size. If they are smaller, it could lead to an out-of-bounds situation. Additionally...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100498)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100498 advisory. In the Linux kernel, the following vulnerability has been resolved: smb: client: mask server-provided mode to 07777 in modefromsid When modefromsid is active,...

DEBIAN-CVE-2026-68097

In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate ACE size against SID sub-authorities setntacldacl validates sid.numsubauth before copying an ACE, but does not verify that the declared ACE size contains all sub-authorities described by that field. An undersized...

UBUNTU-CVE-2026-68097

In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate ACE size against SID sub-authorities setntacldacl validates sid.numsubauth before copying an ACE, but does not verify that the declared ACE size contains all sub-authorities described by that field. An undersized...

CVE-2026-68097

In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate ACE size against SID sub-authorities setntacldacl validates sid.numsubauth before copying an ACE, but does not verify that the declared ACE size contains all sub-authorities described by that field. An undersized...

CVE-2026-68097

Summary: CVE-2026-68097 affects the Linux kernel ksmbd path handling POSIX ACLs. The root cause is a check failure in ACE validation: set_ntacl_dacl() validates sid.num_subauth but does not ensure the declared ACE size can contain all sub-authorities, allowing an undersized ACE to be copied and l...