WMIHACKER

WMIHACKER无需445端口 免责声明：本项目涉及的技术仅供安全学习与研究防御用途，禁止非法使用！ 免杀横向移动命令执行测试工具无需445端口 介绍：免杀横向渗透远程命令执行，常见的WMIEXEC、PSEXEC执行命令是创建服务或调用Win32Process.create执行命令，这些方式都已经被杀软100%拦截，通过改造出WMIHACKER免杀横向移动测试工具。无需445端口 主要功能：1、命令执行；2、文件上传；3、文件下载；4、PTH使用 使用 合并Issue 1里PTH的使用方法： root@kitploit: 第54-58行代码： if user = "-" And pas...

get_Team_Pass

getTeamPass 从局域网中的远程计算机获取TeamViewer的ID和密码 该程序从局域网中的远程计算机获取TeamViewer的ID和密码。 对后渗透测试或系统管理员最为有用。 已在Windows 7和Windows 10 x86及x64上测试。 从releases文件夹下载二进制文件 https://github.com/kr1shn4murt1/getTeamPass/releases/latest 前提条件 你必须在远程计算机上拥有有效的凭据 目标机器上的445端口必须可访问...

POC-CVE-2020-0796

- Affected versions - Windows 10 Version 1903 for 32-bit Systems - Windows 10 Version 1903 for ARM64-based Systems - Windows 10 Version 1903 for x64-based Systems - Windows 10 Version 1909 for 32-bit Systems - Windows 10 Version 1909 for ARM64-based Systems - Windows 10 Version 1909 for...

SMB-Protocol-Vulnerability_CVE-2017-0144

LAB: ATAQUE AL SISTEMA OPERATIVO WINDOWS BASADO EN LA VULNERABILIDAD DEL PROTOCOLO SMB. 1. DESCRIPCIÓN 2. INTRODUCCIÓN 3. PREPARACIÓN 4. REALIZACIÓN DEL ATAQUE 5. CÓMO PREVENIR 1. DESCRIPCIÓN En este laboratorio usaremos dos computadoras para simular un ataque basado en la vulnerabilidad del...

eternalghosttest

Eternalghost Alemán Inglés Alemán Este repositorio contiene un caso de prueba para CVE-2020-0796 Con este pequeño script puede comprobar si uno de sus servidores es vulnerable. El script comprueba si tiene la compresión activada y si la versión de SMB es 3.1.1. Todo esto se realiza mediante una...

Vulnerability-Research-CVE-2017-0144

Vulnerability-Research-CVE-2017-0144 LAB: ATAQUE AL SISTEMA OPERATIVO WINDOWS BASADO EN LA VULNERABILIDAD DEL PROTOCOLO SMB. I. DESCRIPCIÓN En este laboratorio usaremos dos computadoras para simular un ataque basado en la vulnerabilidad del protocolo SMB del sistema operativo Windows. Una máquina...

Exploit_MS08-067

Guía Completa de Uso: Exploit MS08-067 Mejorado 📌 Uso Básico root@kitploit: python3 ExploitMS08-067.py OPCIONES 🎯 Ejemplos Prácticos 1. Windows XP SP0/SP1 Puerto Default 445 root@kitploit: python3 ExploitMS08-067.py 192.168.1.100 1 2. Windows 2003 SP1 English Puerto 139 root@kitploit: python3...

CVE_2020_0796_CNA

CVE-2020-0796-CNA Modificado según el POC proporcionado por danigargu, se implementó la reproducción de escalada de privilegios en Windows 10 y se desarrolló AggressorScripts basado en el proyecto de DLL de reflexión de stephenfewer y la interfaz proporcionada por la documentación de CobaltStrike...

CVE-2024-27686

Mikrotik RouterOS x86 6.40.5 through 6.49.10 fixed in 7 allows a remote attacker to cause a denial of service device crash via crafted packet data to the SMB service on TCP port 445...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: smb: server: Fixed a leak in activenumconn when there is a failure in transport allocation. The commit 77ffbcac4e56 “smb: server: fixed the leak in activenumconn in ksmbdtcpnewconnection” addresses the failure path in kthreadrun...

EUVD-2024-24880

Mikrotik RouterOS x86 6.40.5 through 6.49.10 fixed in 7 allows a remote attacker to cause a denial of service device crash via crafted packet data to the SMB service on TCP port 445...

CVE-2024-27686

Mikrotik RouterOS x86 6.40.5 through 6.49.10 fixed in 7 allows a remote attacker to cause a denial of service device crash via crafted packet data to the SMB service on TCP port 445...

CVE-2024-27686

Mikrotik RouterOS x86 6.40.5 through 6.49.10 fixed in 7 allows a remote attacker to cause a denial of service device crash via crafted packet data to the SMB service on TCP port 445...

CVE-2024-27686

CVE-2024-27686 affects MikroTik RouterOS on x86, with versions 6.40.5 through 6.49.10 vulnerable to remote denial of service via specially crafted SMB data on TCP port 445; 6.49.10 is among the tested ranges and the fix is in version 7. The root cause involves handling of SMB requests that can cr...

CVE-2024-27686

Mikrotik RouterOS x86 6.40.5 through 6.49.10 fixed in 7 allows a remote attacker to cause a denial of service device crash via crafted packet data to the SMB service on TCP port 445...

CVE-2024-27686

Mikrotik RouterOS x86 6.40.5 through 6.49.10 fixed in 7 allows a remote attacker to cause a denial of service device crash via crafted packet data to the SMB service on TCP port 445...

Linux Distros Unpatched Vulnerability : CVE-2026-31711

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - smb: server: fix activenumconn leak on transport allocation failure Commit 77ffbcac4e56 smb: server: fix leak of activenumconn in ksmbdtcpnewconnection address...

📄 MikroTik RouterOS 6.40.10 Denial of Service

This exploit targets a vulnerability in the MikroTik RouterOS SMB service, allowing remote attackers to crash the SMB process and render services unavailable. Specially crafted SMB packets trigger an abnormal condition, leading to a denial of service, requiring manual restart or reboot of the...

MiracleLinux 4 : openswan-2.6.32-20.0.1.AXS4 (AXSA:2013-445:01)

The remote MiracleLinux 4 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2013-445:01 advisory. Openswan is a free implementation of IPsec & IKE for Linux. IPsec is the Internet Protocol Security and uses strong cryptography to provide both authenticatio...

MiracleLinux 3 : firefox-3.0.16-1.1AXS3 (AXSA:2009-445:05)

The remote MiracleLinux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2009-445:05 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. Security bugs fixed with this release:...