1767 matches found
CVE-2020-0665
CVE-2020-0665 - SIDフィルターバイパス Active Directoryフォレスト（クロスフォレスト攻撃）におけるSIDフィルタリングをバイパスするCVE-2020-0665の概念実証。 攻撃の要件 対象のドメインコントローラマシンは、2020年2月以降にパッチが適用されていない必要があります。 以前に信頼するフォレストのドメインコントローラを侵害していること（この攻撃にはSYSTEMユーザーとしての高い権限が必要です）。 信頼するフォレストとの間に双方向の推移的信任関係が確立されていること。...
Invoke-SessionHunter
Invoke-SessionHunter アクティブなユーザーセッションに関する情報をリモートコンピューターから取得して表示します。管理者権限は不要です。 このツールは、リモートレジストリサービスを利用して、リモートコンピューター上の HKEYUSERS レジストリハイブを照会します。アクティブなユーザーセッションに関連するセキュリティ識別子（SID）を特定して抽出し、それらを対応するユーザー名に変換することで、現在ログインしているユーザーに関する情報を提供します。 -CheckAdminAccess スイッチを指定すると、Invoke-WMIRemoting...
zBang
zBangは、スキャンされたネットワーク内の潜在的な特権アカウントの脅威を検出する特別なリスク評価ツールです。 組織やレッドチームはzBangを利用して、潜在的な攻撃ベクトルを特定し、ネットワークのセキュリティ体制を向上させることができます。結果はグラフィカルインターフェースか、生の出力ファイルのレビューによって分析できます。 zBangの詳細は、@Hechtovによる「Big zBang Theory」ブログ記事でご覧いただけます：...
evtx
EVTX A cross-platform parser for the Windows XML EventLog format Features 🔒 Implemented using 100% safe rust - and works on all platforms supported by rust that have stdlib. ⚡ Fast - see benchmarks below. It's faster than any other implementation by orders of magnitude! 🚀 Multi-threaded. ✨ Suppor...
wodat
wodat Windows Oracle 数据库攻击工具 将流行的 Oracle 数据库攻击工具 ODAT https://github.com/quentinhardy/odat 移植到 C .Net Framework 的简单版本。 感谢 https://github.com/quentinhardy/odat，因为大部分功能都是从他的代码移植过来的。 执行基于密码的攻击，例如：用户名作为密码、针对给定密码的用户名列表、针对给定用户名的密码列表、用户名:密码组合列表。 测试凭据/连接字符串是否对目标有效。 暴力攻击以发现有效的 SID/服务名。 根据提供的目标文件或 CIDR...
pulledpork
PulledPork PulledPork for Snort and Suricata rule management from Google code Find us on Libera.Chat IRC pulledpork Copyright C 2009-2021 JJ Cummings, Michael Shirk and the PulledPork Team! Thank you for choosing to use PulledPork! This file provides some basic guidance on the usage of PulledPork...
GlobalUnProtect
GlobalUnProtect 用于解密和收集 Windows 客户端安装中的 GlobalProtect 配置、Cookie 和 HIP 文件的 PoC 工具。 博客文章：https://rotarydrone.medium.com/4a1d8fc7773e 用法 可独立运行，也可通过 execute-assembly 或等效方式在内存中运行。将所有内容收集到内存中的 zip 文件，并写入指定位置。 root@kitploit: GlobalUnProtect.exe Usage: GlobalUnProtect.exe C:\Path\To\Output.zip...
CVE-2024-3495-POC
CVE-2024-3495-POC The Country State City Dropdown CF7 WordPress plugin versions up to 2.7.2 is vulnerable to SQL Injection via 'cnt' and 'sid' parameters. Insufficient escaping and lack of preparation in the SQL query allow unauthenticated attackers to append queries, potentially extracting...
CVE-2026-81576
If configured as a server, CodeMeter Runtime before versions 8.41a and 9.10 issues handles per connection and relies on a cryptographically weak SID as sole authenticator. An attacker can brute-force the SID, recover another session's handle number, and read license information belonging to anoth...
CVE-2026-81576 Improper Authentication of Session Handles
If configured as a server, CodeMeter Runtime before versions 8.41a and 9.10 issues handles per connection and relies on a cryptographically weak SID as sole authenticator. An attacker can brute-force the SID, recover another session's handle number, and read license information belonging to anoth...
EUVD-2026-66983
If configured as a server, CodeMeter Runtime before versions 8.41a and 9.10 issues handles per connection and relies on a cryptographically weak SID as sole authenticator. An attacker can brute-force the SID, recover another session's handle number, and read license information belonging to anoth...
CVE-2026-81576 Improper Authentication of Session Handles
If configured as a server, CodeMeter Runtime before versions 8.41a and 9.10 issues handles per connection and relies on a cryptographically weak SID as sole authenticator. An attacker can brute-force the SID, recover another session's handle number, and read license information belonging to anoth...
CVE-2026-81576
CodeMeter Runtime (WIBU), when configured as a server in versions before 8.41a and 9.10 , issues a per-connection session handle and relies on a cryptographically weak SID as the sole authenticator. An attacker with network access can brute-force the SID , recover another session's handle number,...
Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15
In the Linux kernel, the following vulnerabilities have been resolved: SELinux: The use of both GFPKERNEL and GFPATOMIC in convertcontext was enabled. The following warning was triggered in a hardware environment: SELinux: Converting 162 SID table entries... BUG: The sleeping function was called...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100498)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100498 advisory. In the Linux kernel, the following vulnerability has been resolved: smb: client: mask server-provided mode to 07777 in modefromsid When modefromsid is active,...
DEBIAN-CVE-2026-68097
In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate ACE size against SID sub-authorities setntacldacl validates sid.numsubauth before copying an ACE, but does not verify that the declared ACE size contains all sub-authorities described by that field. An undersized...
CVE-2026-68097
In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate ACE size against SID sub-authorities setntacldacl validates sid.numsubauth before copying an ACE, but does not verify that the declared ACE size contains all sub-authorities described by that field. An undersized...
UBUNTU-CVE-2026-68097
In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate ACE size against SID sub-authorities setntacldacl validates sid.numsubauth before copying an ACE, but does not verify that the declared ACE size contains all sub-authorities described by that field. An undersized...
CVE-2026-68097
In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate ACE size against SID sub-authorities setntacldacl validates sid.numsubauth before copying an ACE, but does not verify that the declared ACE size contains all sub-authorities described by that field. An undersized...
EUVD-2026-55478
In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate ACE size against SID sub-authorities setntacldacl validates sid.numsubauth before copying an ACE, but does not verify that the declared ACE size contains all sub-authorities described by that field. An undersized...