21 matches found
CVE-2025-24054-24071---Metasploit-Module
CVE-2025-24054/24071 - Metasploit 模块 概述 该漏洞发生在解压 .zip 文件的过程中。当与特制的 .library-ms 文件交互时，Windows 资源管理器会处理内部的 XML 架构，并自动向攻击者控制的远程路径发起 SMB 身份验证请求。 这种行为允许在无需用户进行解压文件之外的任何额外交互的情况下，泄露用户的 NTLM 哈希值。如需查看概念验证，建议访问以下链接：Fluffy - HTB。 ⚠️ 重要说明： 尽管该漏洞最初以 CVE-2025-24071 传播，但目前官方追踪编号为 CVE-2025-24054。 📌 安装 克隆仓库： ❯ git...
CVE-2025-24054_PoC
CVE-2025-24054PoC 针对 CVE-2025-24054/CVE-2025-24071 的概念验证...
CVE-2025-24054_CVE-2025-24071-PoC
CVE-2025-24054 和 CVE-2025-24071 - 通过 .library-ms 利用的 NTLM 哈希泄漏 本 PoC 演示了在未打补丁的 Windows 系统（2025 年 3 月星期二补丁）上通过 .library-ms 文件利用 NTLM 哈希泄漏。 ⚠️ 仅用于教育和研究目的。请勿在生产环境或未经授权的系统上使用。 🧠 描述 当在 Windows 资源管理器中打开（或预览）包含 UNC 路径的 .library-ms 文件时，会触发向指定服务器发送 SMB 身份验证请求，从而泄漏 NTLMv2 哈希。 📁 文件 generatelibraryms.py：生成恶意的...
CVE-2025-24054_PoC
此存储库没有 README。...
cve-2025-24054-lab
CVE-2025-24054 — 检测与缓解实验室 针对 Windows 新技术局域网管理器 NTLM 哈希泄露欺骗 漏洞 CVE-2025-24054 的防御性安全实验室项目日志，假设受影响的系统短期内无法修补 。 蓝队教育项目（默多克大学 ICT279）。利用技术已公开记录（Check Point、CISA KEV）；原创贡献在于检测与缓解方法论。本仓库未存储任何真实凭据或虚拟机凭据表。 漏洞详情 字段| 值 ---|--- CVE| CVE-2025-24054 类别| 欺骗 / 强制身份验证 通用弱点枚举 CWE| CWE-73: 文件名或路径的外部控制 MITRE ATT&CK...
CVE-2025-50154-Aggressor-Script
LNK Weaponizer - Cobalt Strike Aggressor 脚本 一个全面的 Cobalt Strike Aggressor 脚本，用于武器化并执行恶意 LNK 文件和 Library-MS 文件，以泄露 SMB NTLMv2-SSP 哈希。包含 CVE-2025-24054 绕过技术。 ⚠️ 免责声明 此工具仅用于教育和研究目的。作者对任何滥用此代码的行为不承担任何责任。仅在你拥有或明确获准测试的系统上使用。 捕获 NTLM 哈希 该脚本生成武器化的 .lnk 和 .library-ms 文件，当打开时会触发向操作者主机的 SMB 身份验证。 泄露的 NTLMv2...
CVE-2025-24054
Este repositorio no tiene un README...
CVE-2025-24054
CVE-2025-24054 NTLM漏洞（CVE-2025-24054）被利用进行哈希窃取...
📄 Microsoft Windows 10 / 11 NTLM Hash Disclosure Spoofing
Microsoft Windows 10 / 11 proof of concept exploit that generates a .library-ms XML file pointing to a network share UNC. When opened/imported on Windows, the library points to the specified UNC path. Exploit Title: windows 10/11 - NTLM Hash Disclosure Spoofing Date: 2025-10-06 Exploit Author:...
windows 10/11 - NTLM Hash Disclosure Spoofing
Exploit Title: windows 10/11 - NTLM Hash Disclosure Spoofing Date: 2025-10-06 Exploit Author: Beatriz Fresno Naumova Vendor Homepage: https://www.microsoft.com Software Link: N/A Version: Not applicable this is a generic Windows library file behavior Tested on: Windows 10 x64 / Windows 11 x64 lab...
Exploit for External Control of File Name or Path in Microsoft
VIETNAMESE - Với file CVE-2025-24054.py và Exploit.librar...
About Spoofing – Windows NTLM (CVE-2025-24054) vulnerability
About Spoofing - Windows NTLM CVE-2025-24054 vulnerability. It was patched in the March Microsoft Patch Tuesday. VM vendors didn't mention this vulnerability in their reviews; it was only known to be exploited via user interaction with a malicious file. A month later, on April 16, Check Point...
Microsoft - NTLM Hash Disclosure Spoofing (library-ms)
Exploit title: Microsoft - NTLM Hash Disclosure Spoofing library-ms Exploit Author: John Page aka hyp3rlinx x.com/hyp3rlinx ISR: ApparitionSec Back in 2018, I reported a ".library-ms" File NTLM information disclosure vulnerability to MSRC and was told "it was not severe enough", that being said I...
PT-2025-17846 · Undefined · Undefined
We added the following vulnerabilities to our feed: - UNDISCLOSED: Microsoft Management Console - CVE-2025-24054: Windows File Explorer NTLM Leak - CVE-2025-24985: Windows FAT DoS - CVE-2023-36205: Zemana AntiMalware LPE - CVE-2021-21551: Dell Driver LPE https://t.co/iKW6swSCtZ...
⚡ Weekly Recap: iOS Zero-Days, 4Chan Breach, NTLM Exploits, WhatsApp Spyware & More
Can a harmless click really lead to a full-blown cyberattack? Surprisingly, yes — and that's exactly what we saw in last week's activity. Hackers are getting better at hiding inside everyday actions: opening a file, running a project, or logging in like normal. No loud alerts. No obvious red flag...
PT-2025-17372
Name of the Vulnerable Software and Affected Versions Verisay Communication and Information Technology Industry and Trade Ltd. Co. Titarus versions prior to 2.144.4 Description The software contains an Improper Neutralization of Input During Web Page Generation issue, which allows for Cross-Site...
CVE-2025-24054 Under Active Attack—Steals NTLM Credentials on File Download
The U.S. Cybersecurity and Infrastructure Security Agency CISA on Thursday added a medium-severity security flaw impacting Microsoft Windows to its Known Exploited Vulnerabilities KEV catalog, following reports of active exploitation in the wild. The vulnerability, assigned the CVE identifier...
CVE-2025-24054
External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network...
CVE-2025-24054
CVE-2025-24054 is a Windows NTLM vulnerability allowing an attacker to induce NTLMv2-SSP hash disclosure by leveraging explorer.exe to fetch remote SMB resources via crafted file types (notably .library-ms and .lnk/.library-ms payloads). Public PoCs and exploits demonstrate creating malicious .li...
