Back Sploitus

imposter exploit

Sploitus • September 20, 2026

Share: View original

Инструмент пентеста, используемый для атаки на Windows-клиентов в недоверенных сетях.

* Имитация начальных шагов контроллера домена для обмана Network Location Awareness

Текущая версия тестировалась на Kali Linux, но должна работать и на других операционных системах.

Используйте следующие шаги для настройки imposter на машине Kali Linux.

git clone

Частный релиз 2014-06-05. Реализует DNS, CLDAP и LDAP. Может понижать LDAP bind для использования NTLM и подделывать успешную аутентификацию, чтобы обмануть Network Location Awareness и установить политику домена.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Emerging Exploits Targeting Windows Clients in Untrusted Networks Recent cybersecurity developments highlight two new exploits targeting Windows clients in untrusted networks. The 'imposter exploit' simulates domain controller initial steps to deceive Network Location Awareness, affecting systems running on Kali Linux and potentially others. This tool can lower LDAP bind to use NTLM and spoof successful authentication. The 'PAVELOW exploit' is a pentesting tool that aids in vulnerability exploitation on Kali Linux, offering various pre-installed tools for users. Both exploits emphasize the need for heightened awareness among security professionals regarding potential vulnerabilities in their environments. The tools are currently available for use, with the 'imposter exploit' being a private release from 2014, while 'PAVELOW' is actively being developed. 2 sources 34

imposter exploit

The full story

Extracted Entities

Platforms (2)

Tools (1)