Learn how a DCShadow attack works, with focus on impact, detection, prevention and future trends.

Learn everything you need to know about the Microsoft exploit Zerologon, what we believe is the most critical Active Directory vulnerability discovered this year.

During the November security update cycle, Microsoft released a patch for two new vulnerabilities, CVE-2021-42287 and CVE-2021-42278. Both vulnerabilities...

Exploiting CVE-2021-42278 and CVE-2021-42287 to impersonate DA from standard domain user - GitHub - Ridter/noPac: Exploiting CVE-2021-42278 and CVE-2021-42287 to impersonate DA from standard domai...

CVE-2021-42287/CVE-2021-42278 Scanner & Exploiter. - cube0x0/noPac

CVE-2025-24799 Exploit: GLPI - Unauthenticated SQL Injection - MatheuZSecurity/Exploit-CVE-2025-24799

ADCS abuser. Contribute to zer1t0/certi development by creating an account on GitHub.

Understand the role of the Kerberos PAC in identity authentication and learn how it supports secure access and integrity across Active Directory environments.

Advanced LLM-powered brute-force tool combining AI intelligence with automated login attacks - MorDavid/BruteForceAI

Table of contents Intro Oracle OAM Authentication flow Hijacking the session Global Exposure Proof-of-Concept Webserver Script Proof-of-Concept Video Mitigation CVSS rating Intro TL;DR Badly configured Oracle OAM 10g allows remote attackers to hijack sessions…

A vulnerability arises when a Token is forged by the same service but doesn't verify the issuer. This can lead to security risks, as it means an attacker could create a forged Token and manipulate the fields or impersonate an user.

ShodanX is a tool to gather information of targets using shodan dorks⚡. - RevoltSecurities/ShodanX

Updates on security incident

Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication - kgretzky/evilginx2