home.social

#kerberos — Public Fediverse posts

Live and recent posts from across the Fediverse tagged #kerberos, aggregated by home.social.

  1. Metasploit @[email protected] ·

    New in #Metasploit: SugarCRM #RCE, login scanner and credential gatherer for Wowza Streaming Engine Manager, and three new methods for #PetitPotam.

    Plus, admin/kerberos/forge_ticket now supports a new extra_sids option — which is useful for including cross-domain SIDs for forging external #Kerberos trust tickets as part of cross-trust domain escalation. The admin/kerberos/inspect_ticket has also been updated to support viewing these extra SID values.

    More Kerberos and secrets dumping improvements in this week's wrap-up!

    rapid7.com/blog/post/2023/03/1

    #metasploit #rce #petitpotam #kerberos