APT
تناقش هذه القناة: - الأمن الهجومي - RedTeam - أبحاث البرامج الضارة - OSINT - إلخ إخلاء المسؤولية: t.me/APT_Notes/6 رابط الدردشة: t.me/APT_Notes_PublicChat
This channel is part of the discussion
APT appears in 26 event pages on TGListResetNightmare ResetNightmare (CVE-2026-27912) is a validation flaw in the Kerberos Change Password protocol that allows for resetting the password of any target user/computer account, without knowing the current one. The attack requires an unpatched domain controller, and the…
Pentest award 2026 ждет твою заявку! Меньше двух недель остается чтобы отправить заявки на «хакерский оскар». Не упускайте шанс получить признание отрасли, классные призы и просто провести время на закрытой церемонии награждения вместе с лучшими представителями отрасли.…
🔒 Certighost (CVE-2026-54121) — AD CS Domain Controller Impersonation Low-privileged domain user can impersonate a Domain Controller via an AD CS enrollment chase fallback. By supplying cdc (Client DC) and rmd (Remote Domain) request attributes, an attacker forces the…
🔒 Citrix NetScaler Pre-Auth RCE (CVE-2026-8452) Unauthenticated heap overflow in SAML signature canonicalization. An oversized PrefixList inside the <ds:SignedInfo> InclusiveNamespaces element overflows a fixed-size buffer, corrupting adjacent nsb chunk metadata. This yields a…
ResetNightmare ResetNightmare (CVE-2026-27912) is a validation flaw in the Kerberos Change Password protocol that allows for resetting the password of any target user/computer account, without knowing the current one. The attack requires an unpatched domain controller, and the…
🔒 Certi-Bhai — IIS AppPool → NT AUTHORITY\SYSTEM via AD CS RPC A webshell under IIS AppPool\DefaultAppPool can enroll against the ADCS RPC endpoint and come back with a certificate for the host machine account. Outbound domain traffic from a virtual AppPool identity is…