71 matches found
FakeAuth
FakeAuth FakeAuth is a tool that prompts for user credentials and exfiltrates it with HTTP protocol. Inspired by following projects 1. hlldz's PICKL3 https://github.com/hlldz/pickl3 Expect dirty code and some bugs ; Installation No special requirements Usage v1.01 root@kitploit: Usage: FakeAuth.e...
Invoke-WCMDump
Invoke-WCMDump PowerShell script to dump Windows credentials from the Credential Manager Invoke-WCMDump enumerates Windows credentials in the Credential Manager and then extracts available information about each one. Passwords are retrieved for "Generic" type credentials, but can not be retrived ...
BypassCredGuard
BypassCredGuard - 通过修补 Wdigest 内存绕过 Credential Guard 背景 Adam Chester @xpn 写了一篇名为 "探索 Mimikatz - 第 1 部分 - WDigest" 的文章，其中介绍了通过内存修补来启用 UseLogonCredential 并使 Wdigest 缓存明文凭据的方法，这引起了我的兴趣。 LSASS 进程加载的 wdigest.dll 模块有两个有趣的全局变量：gfParameteruseLogonCredential 和...
BackupCreds
BackupCreds root@kitploit: | | | | | | | Dump all the Creds! | | | | | | | | | | | | Lefteris lefty Panos | || 滥用 SeTrustedCredmanAccessPrivilege 转储用户凭据 该程序能够转储用户在 Windows 凭据管理器中存储的凭据。 在存在提权 shell 且当前有多个用户登录的情况下，这是一种有用的技术。 步骤 1. 找到我们要转储其凭据的用户对应的 WinLogon 进程 2. 使用 PROCESSQUERYLIMITEDINFORMATION...
CVE-2026-72958
Double free in Windows Credential Guard allows an authorized attacker to elevate privileges locally...
CVE-2026-70578
Heap-based buffer overflow in Windows Credential Guard allows an authorized attacker to elevate privileges locally...
CVE-2026-69814
Use after free in Windows Credential Providers allows an authorized attacker to elevate privileges locally...
CVE-2026-69790
Heap-based buffer overflow in Windows Credential Providers allows an authorized attacker to elevate privileges locally...
CVE-2026-69729
Heap-based buffer overflow in Windows Credential Providers allows an authorized attacker to execute code over a network...
CVE-2026-70578
CVE-2026-70578 is a heap-based buffer overflow in Windows Credential Guard that allows an authorized local attacker to elevate privileges . The Microsoft-assigned CVSS 3.1 score is 7.0 (High) , with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H , indicating local access, high attack complexity,...
EUVD-2026-73655
Heap-based buffer overflow in Windows Credential Guard allows an authorized attacker to elevate privileges locally...
CVE-2026-69814
CVE-2026-69814 is a use-after-free vulnerability in Windows Credential Providers that allows an authorized attacker to achieve local privilege escalation . The CVSS 3.1 score is 7.0 (HIGH) , with a local attack vector, high complexity, and low privileges required, resulting in high impact to conf...
EUVD-2026-73597
Use after free in Windows Credential Providers allows an authorized attacker to elevate privileges locally...
EUVD-2026-73115
Double free in Windows Credential Guard allows an authorized attacker to elevate privileges locally...
CVE-2026-72958
CVE-2026-72958 is a double free vulnerability in Windows Credential Guard that allows an authorized attacker to elevate privileges locally . The flaw resides in the Credential Guard component of Windows, a security feature that isolates user credentials from the rest of the operating system. The ...
CVE-2026-69729
CVE-2026-69729 is a heap-based buffer overflow in Windows Credential Providers that allows an authorized attacker to achieve remote code execution over a network. The vulnerability requires low privileges and no user interaction , with an attack complexity of low and network attack vector, as sco...
EUVD-2026-73040
Heap-based buffer overflow in Windows Credential Providers allows an authorized attacker to execute code over a network...
CVE-2026-69790
CVE-2026-69790 is a heap-based buffer overflow in Windows Credential Providers that enables a local, low-privilege attacker to escalate privileges. The vulnerability requires local access with low privileges , no user interaction , and has low attack complexity , resulting in HIGH impact across c...
