autoblue

AUTOBLUE: Automatisiertes EternalBlue-Exploit-Tool AUTOBLUE ist ein Automatisierungstool, das dazu entwickelt wurde, die EternalBlue-Sicherheitslücke CVE-2017-0144 auf Windows-Maschinen auszunutzen. Das Tool vereint die Leistungsfähigkeit von Nmap für die Schwachstellensuche und Metasploits...

Eternal-Blue-CVE-2017-0144-THM-Write-Up

Questo repository non contiene un README...

SMB-Protocol-Vulnerability_CVE-2017-0144

LAB: ATTACCO AL SISTEMA OPERATIVO WINDOWS BASATO SULLA VULNERABILITÀ DEL PROTOCOLLO SMB. 1. DESCRIZIONE 2. INTRODUZIONE GENERALE 3. PREPARAZIONE 4. ESECUZIONE DELL'ATTACCO 5. MISURE DI PREVENZIONE 1. DESCRIZIONE In questo laboratorio useremo due computer per simulare un attacco basato sulla...

Detect-CVE-2017-0144-attack

Python-Programm zur Erkennung von CVE-2017-0144-Angriffen Das Python-Programm überwacht kontinuierlich den Netzwerkverkehr in Echtzeit. Es gibt eine Warnung auf der Konsole aus, wenn ein Angriff mit CVE-2017-0144 EternalBlue erkannt wird. 1. Lab-Aufbau Dieses Lab wird auf 3 virtuellen Maschinen i...

eternal_scanner

ETERNAL SCANNER 2.4 Eternal scanner è uno scanner di rete per l'exploit Eternal Blue CVE-2017-0144 e Eternal Romance named pipe CVE-2017-0145. Screenshot Versione 2.2 Nuove Implementazioni Controllo vulnerabilità Eternal Romance escan -er Risultati divisi del database di Escan escan -l Video...

eternal_scanner

ETERNAL SCANNER 2.4 Eternal scanner is an network scanner for Eternal Blue exploit CVE-2017-0144 & Eternal Romance named pipe CVE-2017-0145 . Screenshots 2.2 Version New Implementations Eternal Romance Vulnerability check escan -er Escan Database Splited Results escan -l Video...

Vulnerability-Research-CVE-2017-0144

Vulnerability-Research-CVE-2017-0144 LAB: ANGRIFF AUF DAS WINDOWS-BETRIEBSSYSTEM BASIEREND AUF DER SMB-PROTOKOLLSCHWACHSTELLE. I. BESCHREIBUNG In diesem Lab verwenden wir zwei Rechner, um einen Angriff zu simulieren, der auf einer Schwachstelle im SMB-Protokoll des Windows-Betriebssystems basiert...

VAPT-Report-on-SMB-Exploitation-in-Windows-10-Finance-Endpoint

VAPT-Bericht zur SMB-Ausnutzung auf einem Windows 10 Finanz-Endpunkt Dieser Bericht beschreibt eine strukturierte VAPT-Durchführung mit Fokus auf PCI DSS-Compliance, SMB-Dienstaufzählung und Ausnutzung von CVE-2017-0144 EternalBlue auf einem Windows 10-Rechner innerhalb einer finanzorientierten...

EternalBlue-Vulnerability-Scanner

EternalBlue Scanner Ein Python-Tool zum Scannen von SMB-fähigen Geräten auf die EternalBlue-Sicherheitslücke CVE-2017-0144. Dieses Skript überprüft, ob Geräte in einem Netzwerk anfällig für den EternalBlue-Exploit sind, indem es SMB-Verbindungen testet. ⚡ Funktionen ✅ Scannt eine Liste von...

BlueDoor

Sfida CTF BlueDoor Panoramica Nome della sfida : BlueDoor CVE : CVE-2017-0144 EternalBlue Difficoltà : 3/5 Categoria : Sfruttamento, Windows Autore/i : Seth Davis BlueDoor simula una vulnerabilità reale EternalBlue - CVE-2017-0144 in un sistema Windows 7. L'obiettivo è sfruttare la vulnerabilità,...

Exploit for CVE-2017-0144

💀 EternalBlue MS17-010 Exploitation Research Controlled r...

CosmicBeetle Deploys Custom ScRansom Ransomware, Partnering with RansomHub

The threat actor known as CosmicBeetle has debuted a new custom ransomware strain called ScRansom in attacks targeting small- and medium-sized businesses SMBs in Europe, Asia, Africa, and South America, while also likely working as an affiliate for RansomHub. "CosmicBeetle replaced its previously...

noorfes.com Cross Site Scripting vulnerability OBB-1281479

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

uzagorju.com Cross Site Scripting vulnerability OBB-1226358

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

Exploit for CVE-2017-0144

PoC exploit for CVE-2017-0144 Eternalblue-Doublepulsar. The target product/service is Windows operating system, specifically the SMB Server Message Block protocol. The vulnerability class/vector is a remote code execution RCE vulnerability, which allows an attacker to execute arbitrary code on th...

rch2000.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1099114 Security Researcher g0bl1nsec Helped patch 3768 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting rch2000.com website and i...

url.hqhl.net Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1087920 Security Researcher g0bl1nsec Helped patch 3735 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting url.hqhl.net website and...

SMB DOUBLEPULSAR Remote Code Execution Exploit

This Metasploit module executes a Metasploit payload against the Equation Group's DOUBLEPULSAR implant for SMB as popularly deployed by ETERNALBLUE. While this module primarily performs code execution against the implant, the "Neutralize implant" target allows you to disable the implant. This...

SMB DOUBLEPULSAR Remote Code Execution

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'SMB DOUBLEPULSAR Remote Code Execution', 'Description' = %q This module executes a Metasploit payload against the Equation Group's DOUBLEPULSAR...

Security Bulletin: Multiple vulnerabilities in Cloud Pak System

Summary There are vulnerabilities in Cloud Pak System previously known as PureApplication System. It applies to Cloud Pak System, Software, and Service. Cloud Pak System has addressed these vulnerabilities. Vulnerability Details CVEID: CVE-2019-4096 DESCRIPTION: IBM Pure Application System uses a...