168 matches found
CVE-2020-1472
复现完了有点小BUG，重启后会卡在登录页面比较久。不知道是不是只有我会。谨慎在真实环境利用 实战中可以使用secretsdump.py 的 -use-vss和-history获取历史hash进行恢复. 第一步 pip3 install -r requirements.txt 查看hash secretsdump.py molecule-labs.com/administrator:[email protected] -just-dc-user 'AD$' 攻击 python3 CVE-2020-1472.py AD AD$ 192.168.175.132 查询域控hash...
CVE-2026-54121
CVE-2026-54121 Certighost 이것은 CVE-2026-54121일명 Certighost을 시연하기 위한 개념 증명 도구입니다. 자세한 분석은 https://gist.github.com/H0j3n/a5ef2609b5f2944ac2390a191a534c26 에서 확인하세요. 의존성 설치 이 개념 증명 도구는 단일 Python 스크립트입니다. impacket, cryptography, pyasn1, asn1crypto, dnspython이 필요합니다. sudo pip install...
rbcd-attack
Abusing Kerberos Resource-Based Constrained Delegation TL;DR This repo is about a practical attack against Kerberos Resource-Based Constrained Delegation in a Windows Active Directory Domain. The difference from other common implementations is that we are launching the attack from outside of the...
JLSEC-2026-1322 sshd in OpenSSH before 10.4 has an undocumented security-relevant behavior:...
sshd in OpenSSH before 10.4 has an undocumented security-relevant behavior: GSSAPIStrictAcceptorCheck has no value if the server is in Windows Active Directory...
PT-2026-80564
sshd in OpenSSH before 10.4 has an undocumented security-relevant behavior: GSSAPIStrictAcceptorCheck has no value if the server is in Windows Active Directory...
CVE-2026-65777
Inadequate encryption strength in Windows Active Directory allows an authorized attacker to bypass a security feature over a network...
EUVD-2026-56731
Inadequate encryption strength in Windows Active Directory allows an authorized attacker to bypass a security feature over a network...
EUVD-2026-56302
Improper neutralization of special elements used in a command 'command injection' in Windows Active Directory allows an unauthorized attacker to execute code over a network...
CVE-2026-49179
Improper neutralization of special elements used in a command 'command injection' in Windows Active Directory allows an unauthorized attacker to execute code over a network...
Windows Active Directory Domain Services Remote Code Execution Vulnerability
Improper neutralization of special elements used in a command 'command injection' in Windows Active Directory allows an unauthorized attacker to execute code over a network...
CVE-2026-49179: Improper Neutralization of Special Elements used in a Command
Improper neutralization of special elements used in a command 'command injection' in Windows Active Directory allows an unauthorized attacker to execute code over a network...
PT-2026-70385
Name of the Vulnerable Software and Affected Versions Windows Active Directory affected versions not specified Description Improper neutralization of special elements used in a command, known as command injection, allows an unauthorized remote attacker to execute arbitrary code over a network and...
PT-2026-70672
Name of the Vulnerable Software and Affected Versions Windows Active Directory affected versions not specified Description Inadequate encryption strength allows an authorized attacker to bypass a security feature over a network, which can lead to an impact on the system. Recommendations At the...
CVE-2026-65777: Inadequate Encryption Strength
Inadequate encryption strength in Windows Active Directory allows an authorized attacker to bypass a security feature over a network...
EUVD-2026-44140
Out-of-bounds read in Windows Active Directory allows an authorized attacker to deny service over a network...
EUVD-2026-44010
Improper certificate validation in Windows Active Directory allows an authorized attacker to elevate privileges locally...
EUVD-2026-44018
Loop with unreachable exit condition 'infinite loop' in Windows Active Directory allows an unauthorized attacker to deny service over a network...
CVE-2026-50682
Out-of-bounds read in Windows Active Directory allows an authorized attacker to deny service over a network...