13 matches found
ConscryptTrustUserCerts
Magisk - Conscrypt Trust User Certs 이 모듈은 Android 14에서 설치된 모든 사용자 인증서를 APEX 모듈 com.android.conscrypt 인증서 저장소의 일부로 만들어, 신뢰 체인을 구축할 때 자동으로 사용되도록 합니다. 설치 1. Magisk 설치 2. 파일 압축: zip -r ConscryptTrustUserCerts.zip ./ 또는 릴리스에서 ZIP 파일 다운로드 3. Magisk에 설치 4. 일반적인 절차를 통해 클라이언트 인증서 설치 5. 기기 다시 시작. 인증서 복사는 부...
ADCSync
ADCSsync 이 도구는 ESC1을 활용하여 DCSync를 수행하기 위해 빠르게 제가 만든 도구입니다. 속도는 느리지만 DRSUAPI나 Volume Shadow Copy를 사용하지 않고 임시 DCSync 공격을 수행하는 효과적인 방법을 제공합니다. 이 도구의 첫 번째 버전이며, 기본적으로 도메인의 모든 사용자에 대해 Certipy를 실행하는 과정을 자동화합니다. 아직 개선할 점이 많으며, 향후 인증 방법 및 취약한 템플릿을 자동으로 찾는 프로세스를 자동화하는 기능을 추가할 계획입니다. root@kitploit: python3...
CVE-2026-56624
Improper certificate validation in Apache MINA SSHD server-side. Apache MINA SSHD is a Java library for client-side and server-side SSH. Server-side OpenSSH user certificate validation during user authentication in an Apache MINA SSHD server did not check for the unsupported force-command or...
Security update for NetworkManager
This update for NetworkManager fixes the following issues: CVE-2025-9615: non-admin users are allowed to use certificates from other users bsc1257359. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...
EUVD-2017-17149
Malware in sbrugna...
EUVD-2012-1132
Malware in sbrugna...
nodejs: process interuption due to invalid Public Key information in x509 certificates
A vulnerability has been identified in the Node.js, where an invalid public key is used to create an x509 certificate using the crypto.X509Certificate API a non-expect termination occurs making it susceptible to DoS attacks when the attacker could force interruptions of application processing, as...
Moderate: Red Hat Security Advisory: pki-core security, bug fix, and enhancement update
An update for jss, ldapjdk, pki-core, and tomcatjss is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...
RHEL 7 : pki-core (RHSA-2022:7086)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:7086 advisory. The Public Key Infrastructure PKI Core contains fundamental packages required by Red Hat Certificate System. Security Fixes: pki-core: When using the...
Living off the land, AD CS style
Introduction Unless you have been living under a rock for the last year or so, Active Directory Certificate Services AD CS abuse continues to be a hot topic in offensive security, ever since the excellent research released by Will Schroeder @harmj0y and Lee Christensen @tifkin. I, like many, have...
The vulnerability of the FortiOS operating system, related to deficiencies in access control, allows attackers to obtain secret keys embedded in the system or certificates uploaded by users.
The vulnerability of the FortiOS operating system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to obtain secret keys that are built into the system or certificates uploaded by users. This can occur either through resetting the encryption keys’...
XenMobile Server - Identity credential certificates (PKI) do not auto renew
MSCA Certificates can be set to expire on a certain interval, after hitting the XMS renewal policy default 30 days before expiration. User Certificates PKI are not renewing, leaving expired certificates on devices...
