MITM6-Kerberos-CNAME-Abuse

Kerberos認証リレー - CNAME Abuse Technique PoC 背景 このツールは、MITM6ツールをベースにしたKerberos CNAME悪用リレー手法の概念実証です。 この研究により、Windows Kerberosクライアントの動作に欠陥があることが明らかになりました。DNS CNAMEレコードが返されると、クライアントはエイリアスを辿り、CNAMEホスト名をSPNとして使用してTGSリクエストを構築します。これにより、DNS...

pentest-book

description: - このブックには、私のペネトレーションテストで使用した情報、スクリプト、知識がまとめられています。 /home/six2dez/.pentest-book このサイトをご覧いただきありがとうございます。知っている便利なツールやテクニックがあれば、ぜひこのブックを充実させてください。連絡はTelegram@six2dez、Twitter@six2dez1、Discordsix2dez8201までどうぞ。GitHubのプルリクエストも歓迎です ; 全部ハックしろ 使い方: 上部の検索バーを使うか、左側のセクションをナビゲートしてください。お楽しみください 😊...

Kerberos-CVE-2026-27912

Kerberos-CVE-2026-27912 CVE-2026-27912 - Windows Kerberos 权限提升漏洞 ResetNightmare - 通过 Kerberos 更改密码协议缺陷实现未授权密码重置 📋 详情 字段| 值 ---|--- CVE| CVE-2026-27912 标题| Windows Kerberos 权限提升漏洞 CVSS| 8.0 HIGH CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CWE| CWE-285：授权不当 发布日期| 2026年4月14日 已修补| 2026年4月 🔍 攻击流程...

CVE-2023-21817

CVE-2023-21817 - Windows Kerberos LPE 漏洞检查器 针对 CVE-2023-21817 的极简 C++ 概念验证 PoC / 漏洞检查器。该工具通过与本地安全机构 LSA 子系统交互，帮助安全研究人员和系统管理员确定 Windows 系统是否容易受到 Kerberos 本地权限提升 LPE 漏洞的影响。 概述 CVE-2023-21817 是 Windows Kerberos 组件中的一个本地权限提升漏洞。它允许低权限用户在工作站解锁序列期间绕过安全限制。 该工具尝试通过使用受限制的 KerbUnlockLogon 信息类，调用 LsaLogonUse...

Astra Linux – Vulnerability in Samba

Windows Kerberos Elevation of Privilege Vulnerability...

CVE-2026-69822

Numeric truncation error in Windows Kerberos allows an authorized attacker to elevate privileges locally...

CVE-2026-69760

Out-of-bounds read in Windows Kerberos allows an unauthorized attacker to deny service over a network...

CVE-2026-69744

Null pointer dereference in Windows Kerberos allows an unauthorized attacker to deny service over a network...

CVE-2026-69685

Heap-based buffer overflow in Windows Kerberos allows an authorized attacker to elevate privileges locally...

CVE-2026-69676

Authentication bypass by capture-replay in Windows Kerberos allows an authorized attacker to execute code over a network...

EUVD-2026-73623

Out-of-bounds read in Windows Kerberos allows an unauthorized attacker to deny service over a network...

CVE-2026-69760

Windows Kerberos is affected by an out-of-bounds read vulnerability that allows an unauthorized, unauthenticated attacker to trigger a denial of service over the network. The vulnerability is rated CVSS 7.5 (HIGH) with a low attack complexity and no user interaction required. CISA's SSVC assessme...

CVE-2026-69685

Windows Kerberos is affected by a heap-based buffer overflow that allows an authorized attacker to locally elevate privileges . Per Microsoft, the vulnerability carries a CVSS 3.1 score of 7.8 (HIGH) with a local attack vector, low complexity, low privileges required, and no user interaction, res...

EUVD-2026-73573

Heap-based buffer overflow in Windows Kerberos allows an authorized attacker to elevate privileges locally...

CVE-2026-69676

CVE-2026-69676 is an authentication bypass by capture-replay vulnerability in Windows Kerberos that allows an authorized attacker to achieve remote code execution over a network. The underlying mechanism involves replaying captured Kerberos authentication traffic, enabling privilege escalation be...

EUVD-2026-73071

Authentication bypass by capture-replay in Windows Kerberos allows an authorized attacker to execute code over a network...

EUVD-2026-73065

Numeric truncation error in Windows Kerberos allows an authorized attacker to elevate privileges locally...

CVE-2026-69822

CVE-2026-69822 is a local privilege escalation vulnerability in Windows Kerberos caused by a numeric truncation error . An authorized attacker with low privileges can exploit this to achieve full confidentiality, integrity, and availability impact (CVSS 3.1: 7.8 HIGH , vector AV:L/AC:L/PR:L/UI:N/...

EUVD-2026-73054

Null pointer dereference in Windows Kerberos allows an unauthorized attacker to deny service over a network...

CVE-2026-69744

Windows Kerberos is affected by a null pointer dereference that allows an unauthenticated attacker to trigger a denial of service over a network . The CVSS 3.1 score is 7.5 (HIGH) , with the vector indicating low attack complexity, no privileges required, and no user interaction. The primary impa...