Skip to content

Commit

Permalink
automatic module_metadata_base.json update
Browse files Browse the repository at this point in the history
  • Loading branch information
jenkins-metasploit committed Jan 24, 2025
1 parent 4a8ad46 commit f6e49e4
Showing 1 changed file with 3 additions and 2 deletions.
5 changes: 3 additions & 2 deletions db/modules_metadata_base.json
Original file line number Diff line number Diff line change
Expand Up @@ -24094,7 +24094,8 @@
"type": "auxiliary",
"author": [
"Grant Willcox",
"Spencer McIntyre"
"Spencer McIntyre",
"jheysel-r7"
],
"description": "This module allows users to query a LDAP server for vulnerable certificate\n templates and will print these certificates out in a table along with which\n attack they are vulnerable to and the SIDs that can be used to enroll in that\n certificate template.\n\n Additionally the module will also print out a list of known certificate servers\n along with info about which vulnerable certificate templates the certificate server\n allows enrollment in and which SIDs are authorized to use that certificate server to\n perform this enrollment operation.\n\n Currently the module is capable of checking for certificates that are vulnerable to ESC1, ESC2, ESC3, ESC13,\n and ESC15. The module is limited to checking for these techniques due to them being identifiable remotely from\n a normal user account by analyzing the objects in LDAP.",
"references": [
Expand All @@ -24112,7 +24113,7 @@

],
"targets": null,
"mod_time": "2024-10-10 09:24:48 +0000",
"mod_time": "2025-01-24 07:35:12 +0000",
"path": "/modules/auxiliary/gather/ldap_esc_vulnerable_cert_finder.rb",
"is_install_path": true,
"ref_name": "gather/ldap_esc_vulnerable_cert_finder",
Expand Down

0 comments on commit f6e49e4

Please sign in to comment.