115 matches found
Invoke-WCMDump
Invoke-WCMDump PowerShell script to dump Windows credentials from the Credential Manager Invoke-WCMDump enumerates Windows credentials in the Credential Manager and then extracts available information about each one. Passwords are retrieved for "Generic" type credentials, but can not be retrived ...
FakeAuth
FakeAuth FakeAuth is a tool that prompts for user credentials and exfiltrates it with HTTP protocol. Inspired by following projects 1. hlldz's PICKL3 https://github.com/hlldz/pickl3 Expect dirty code and some bugs ; Installation No special requirements Usage v1.01 Usage: FakeAuth.exe Example:...
BypassCredGuard
BypassCredGuard - Credential Guard Bypass Via Patching Wdigest Memory Background Adam Chester @xpn wrote an article called "Exploring Mimikatz - Part 1 - WDigest" about memory patching to enable UseLogonCredential and make Wdigest cache cleartext credentials intrigued me. The wdigest.dll module...
BackupCreds
BackupCreds | | | | | | | Dump all the Creds! | | | | | | | | | | | | Lefteris lefty Panos | || Abusing SeTrustedCredmanAccessPrivilege to dump user creds The program provides the ability to dump the stored credentials a user might have in the Windows Credential Manager. It is a useful technique ...
CVE-2026-70580
Missing authentication for critical function in Windows Credential Guard allows an authorized attacker to perform spoofing locally...
CVE-2026-69736
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Credential Manager allows an authorized attacker to elevate privileges locally...
CVE-2026-103568
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Credential Providers allows an authorized attacker to elevate privileges locally...
CVE-2026-103568
A race condition vulnerability exists in Windows Credential Providers due to concurrent execution using a shared resource with improper synchronization. This flaw allows an authorized attacker to achieve local privilege elevation . Exploitation details and specific affected versions are not provi...
EUVD-2026-100386
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Credential Providers allows an authorized attacker to elevate privileges locally...
CVE-2026-69736
A race condition exists in the Windows Credential Manager due to concurrent execution using a shared resource with improper synchronization. This vulnerability allows an authorized attacker to perform a local privilege escalation . No specific software versions or exploit links are provided in th...
EUVD-2026-99886
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Credential Manager allows an authorized attacker to elevate privileges locally...
CVE-2026-70580
A missing authentication vulnerability exists in a critical function within Windows Credential Guard . This flaw allows an authorized attacker to perform spoofing locally . The vulnerability has a HIGH base severity score of 8.8 and is categorized under CWE-306 . Official remediation is available...
EUVD-2026-99279
Missing authentication for critical function in Windows Credential Guard allows an authorized attacker to perform spoofing locally...
Windows Credential Manager Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Credential Manager allows an authorized attacker to elevate privileges locally...
Windows Credential Guard Spoofing Vulnerability
Missing authentication for critical function in Windows Credential Guard allows an authorized attacker to perform spoofing locally...
Windows Credential Providers Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Credential Providers allows an authorized attacker to elevate privileges locally...
PT-2026-111961
Name of the Vulnerable Software and Affected Versions Windows Credential Providers affected versions not specified Description An issue exists where concurrent execution using a shared resource with improper synchronization, known as a race condition, allows an authorized attacker to elevate...
Microsoft Windows: CVE-2026-103568: Windows Credential Providers Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Credential Providers allows an authorized attacker to elevate privileges locally...
CVE-2026-103568: Concurrent Execution using Shared Resource with Improper Synchronization
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Credential Providers allows an authorized attacker to elevate privileges locally...
CVE-2026-70580: Missing Authentication for Critical Function
Missing authentication for critical function in Windows Credential Guard allows an authorized attacker to perform spoofing locally...