CVE-2022-33679

This repository contains a functional exploit for CVE-2022-33679, a Kerberos authentication bypass vulnerability. The exploit leverages a flaw in the RC4-HMAC encryption type to recover the session key and forge a valid TGT, allowing authentication bypass.

This repository contains a functional exploit for CVE-2022-33679, a vulnerability in Kerberos authentication. The exploit manipulates the PA-ENC-TIMESTAMP pre-authentication mechanism to bypass authentication by crafting malicious AS-REQ requests.

This repository contains a functional exploit for CVE-2022-33679, a Kerberos authentication bypass vulnerability. The PoC leverages a brute-force approach to recover the session key and forge a valid TGT, allowing unauthorized access to Active Directory services.

This repository contains a functional exploit for CVE-2022-33679, a vulnerability in Kerberos authentication. The exploit leverages a flaw in the AS-REQ pre-authentication process to bypass authentication by manipulating the keystream used for encrypting timestamps.

This repository contains a Python-based scanner that checks for CVE-2022-33679, a vulnerability allowing Kerberos AS-REP roasting without pre-authentication. It sends a crafted AS-REQ to the KDC and analyzes the response to determine vulnerability status.