51 matches found
ActiveDirectoryEnumeration
ADE - ActiveDirectoryEnum python -m ade usage: ade -h --dc DC -o OUTFILE -u USER -s -smb -kp -bh -spn -sysvol --all --no-creds --dry-run --exploit EXPLOIT / | / / / \ / / / / / /| |/ / / / | / / / / / / / / / / / / / / / / / / / / / / \ / / // // /| |/ / / // / / / / / // /...
getSPNless
getSPNless Python tool to obtain Kerberos service tickets using the SPN-less technique. Based on Exploiting RBCD Using a Normal User Account. This tool uses the impacket project. Installation These tools are only compatible with Python 3.5+. Clone the repository from GitHub, install the...
kerberoast
🚩 Patrocinadores Si te gusta este proyecto, ¡considera patrocinarlo en GitHub! Patrocinadores kerberoast Kit de herramientas de ataque Kerberos -puro Python- Instalación pip3 install kerberoast Prerrequisitos Python 3.6 Ver requirements.txt Para los impacientes IMPORTANTE: los formatos de URL de...
targetedKerberoast
targetedKerberoast targetedKerberoast es un script de Python que, al igual que muchos otros por ejemplo, GetUserSPNs.py, puede imprimir hashes "kerberoast" para cuentas de usuario que tengan un SPN configurado. Esta herramienta ofrece la siguiente característica adicional: para cada usuario sin...
krbrelayx
Krbrelayx - Kit de herramientas de retransmisión Kerberos y abuso de delegación no restringida Kit de herramientas para abusar de Kerberos. Requiere impacket, ldap3 y dnspython para funcionar. Se recomienda instalar impacket directamente desde git para tener la última versión disponible. Más...
detect_CVE-2026-25177
detect-CVE-2026-25177 Production-safe scanner that detects exploitation of CVE-2026-25177 — the Active Directory SPN Unicode Collision vulnerability CVSS 8.8. This vulnerability allows any authenticated user with write-SPN permissions to escalate privileges to SYSTEM by injecting Unicode characte...
No Privileges, No Lockout, No Trace: Kerberoasting with SPN Misconfigurations
No Privileges, No Lockout, No Trace: Kerberoasting with SPN Misconfigurations By Maulik Maheta and Henry Bernabe · August 27, 2026 Executive Summary Active Directory misconfigurations are vulnerabilities that attackers can exploit before defenders notice them. This blog exposes a stealthier...
K08602542: SAMBA vulnerability CVE-2022-0336
Security Advisory Description The Samba AD DC includes checks when adding service principals names SPNs to an account to ensure that SPNs do not alias with those already in the database. Some of these checks are able to be bypassed if an account modification re-adds an SPN that was previously...
CVE-2022-0336
The Samba AD DC includes checks when adding service principals names SPNs to an account to ensure that SPNs do not alias with those already in the database. Some of these checks are able to be bypassed if an account modification re-adds an SPN that was previously present on that account, such as...
DEBIAN-CVE-2022-0336
The Samba AD DC includes checks when adding service principals names SPNs to an account to ensure that SPNs do not alias with those already in the database. Some of these checks are able to be bypassed if an account modification re-adds an SPN that was previously present on that account, such as...
CVE-2022-0336: Incorrect Default Permissions
The Samba AD DC includes checks when adding service principals names SPNs to an account to ensure that SPNs do not alias with those already in the database. Some of these checks are able to be bypassed if an account modification re-adds an SPN that was previously present on that account, such as...
CVE-2022-0336
The Samba AD DC includes checks when adding service principals names SPNs to an account to ensure that SPNs do not alias with those already in the database. Some of these checks are able to be bypassed if an account modification re-adds an SPN that was previously present on that account, such as...
CVE-2022-0336
The Samba AD DC includes checks when adding service principals names SPNs to an account to ensure that SPNs do not alias with those already in the database. Some of these checks are able to be bypassed if an account modification re-adds an SPN that was previously present on that account, such as...
CVE-2022-0336
Samba AD DC CVE-2022-0336: SPN checks can be bypassed when re-adding a previously present SPN, enabling a write-enabled attacker to impersonate services or cause DoS by matching an existing SPN. Some advisories note no patch for certain releases (e.g., Samba 4.12.5-7), while others indicate an up...
CVE-2022-0336
The Samba AD DC includes checks when adding service principals names SPNs to an account to ensure that SPNs do not alias with those already in the database. Some of these checks are able to be bypassed if an account modification re-adds an SPN that was previously present on that account, such as...
CVE-2022-0336
The Samba AD DC includes checks when adding service principals names SPNs to an account to ensure that SPNs do not alias with those already in the database. Some of these checks are able to be bypassed if an account modification re-adds an SPN that was previously present on that account, such as...
CVE-2022-32743
A flaw was found in samba that validates the domain name system's host name. This issue links a trailing $ to objectclass=computer, which helps avoid the creation of SPN values that collide with other, possibly privileged hosts...
EulerOS 2.0 SP10 : samba (EulerOS-SA-2022-1666)
According to the versions of the samba packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The Samba vfsfruit module uses extended file attributes EA, xattr to provide ...enhanced compatibility with Apple SMB clients and interoperabilit...
March 8, 2022—KB5011495 (OS Build 14393.5006) - EXPIRED
None None...
Updated samba packages fix security vulnerability
For CVE-2021-20316 and CVE-2021-44141, there is only a workaround and mitigation: All versions of Samba prior to 4.15.5 are vulnerable to a malicious client using a server symlink to determine if a file or directory exists in an area of the server file system not exported under the share...