21 matches found
CVE-2025-24054
CVE-2025-24054 NTLM भेद्यता CVE-2025-24054 हैश चोरी के लिए शोषित...
CVE-2025-24054_PoC
CVE-2025-24054PoC CVE-2025-24054/CVE-2025-24071 के लिए एक प्रूफ ऑफ कॉन्सेप्ट...
CVE-2025-24054_PoC
इस रिपॉजिटरी में README नहीं है।...
CVE-2025-24054_CVE-2025-24071-PoC
CVE-2025-24054 및 CVE-2025-24071 - .library-ms 익스플로잇을 통한 NTLM 해시 유출 이 PoC는 패치되지 않은 Windows 시스템2025년 3월 패치 화요일에서 .library-ms 파일을 통한 NTLM 해시 유출 악용을 시연합니다. ⚠️ 이는 교육 및 연구 목적으로만 제공됩니다. 프로덕션 환경이나 승인되지 않은 시스템에서 사용하지 마십시오. 🧠 설명 UNC 경로가 포함된 .library-ms 파일을 Windows 탐색기에서 열거나 미리 보면 지정된 서버로 SMB 인증 요청이 트리거되어...
CVE-2025-24054
इस रिपॉजिटरी में README नहीं है।...
CVE-2025-50154-Aggressor-Script
LNK Weaponizer - Cobalt Strike Aggressor Script एक व्यापक Cobalt Strike Aggressor स्क्रिप्ट जो SMB NTLMv2-SSP हैश प्रकटीकरण के लिए दुर्भावनापूर्ण LNK फ़ाइलों और Library-MS फ़ाइलों को हथियारबंद और निष्पादित करती है। इसमें CVE-2025-24054 बायपास तकनीक शामिल है। ⚠️ अस्वीकरण यह उपकरण केवल शैक्षिक और...
cve-2025-24054-lab
CVE-2025-24054 — مختبر الكشف والتخفيف سجل مشروع لمختبر أمن دفاعي حول CVE-2025-24054 ، وهو ثغرة كشف تجزئة NTLM عن طريق الانتحال في نظام Windows New Technology LAN Manager NTLM ، وذلك بافتراض أن النظام المتأثر لا يمكن تصحيحه على المدى القصير. مشروع تعليمي للفريق الأزرق جامعة مردوخ ICT279. تقنية...
CVE-2025-24054-24071---Metasploit-Module
CVE-2025-24054/24071 - मेटास्प्लॉइट मॉड्यूल अवलोकन यह भेद्यता .zip फ़ाइल को निकालने की प्रक्रिया के दौरान होती है। विशेष रूप से तैयार की गई .library-ms फ़ाइल के साथ इंटरैक्ट करने पर, विंडोज एक्सप्लोरर आंतरिक XML स्कीमा को संसाधित करता है और स्वचालित रूप से हमलावर द्वारा नियंत्रित एक दूरस्थ पथ पर...
📄 Microsoft Windows 10 / 11 NTLM Hash Disclosure Spoofing
Microsoft Windows 10 / 11 proof of concept exploit that generates a .library-ms XML file pointing to a network share UNC. When opened/imported on Windows, the library points to the specified UNC path. Exploit Title: windows 10/11 - NTLM Hash Disclosure Spoofing Date: 2025-10-06 Exploit Author:...
windows 10/11 - NTLM Hash Disclosure Spoofing
Exploit Title: windows 10/11 - NTLM Hash Disclosure Spoofing Date: 2025-10-06 Exploit Author: Beatriz Fresno Naumova Vendor Homepage: https://www.microsoft.com Software Link: N/A Version: Not applicable this is a generic Windows library file behavior Tested on: Windows 10 x64 / Windows 11 x64 lab...
Exploit for External Control of File Name or Path in Microsoft
VIETNAMESE - Với file CVE-2025-24054.py và Exploit.librar...
About Spoofing – Windows NTLM (CVE-2025-24054) vulnerability
About Spoofing - Windows NTLM CVE-2025-24054 vulnerability. It was patched in the March Microsoft Patch Tuesday. VM vendors didn't mention this vulnerability in their reviews; it was only known to be exploited via user interaction with a malicious file. A month later, on April 16, Check Point...
Microsoft - NTLM Hash Disclosure Spoofing (library-ms)
Exploit title: Microsoft - NTLM Hash Disclosure Spoofing library-ms Exploit Author: John Page aka hyp3rlinx x.com/hyp3rlinx ISR: ApparitionSec Back in 2018, I reported a ".library-ms" File NTLM information disclosure vulnerability to MSRC and was told "it was not severe enough", that being said I...
PT-2025-17846 · Undefined · Undefined
We added the following vulnerabilities to our feed: - UNDISCLOSED: Microsoft Management Console - CVE-2025-24054: Windows File Explorer NTLM Leak - CVE-2025-24985: Windows FAT DoS - CVE-2023-36205: Zemana AntiMalware LPE - CVE-2021-21551: Dell Driver LPE https://t.co/iKW6swSCtZ...
⚡ Weekly Recap: iOS Zero-Days, 4Chan Breach, NTLM Exploits, WhatsApp Spyware & More
Can a harmless click really lead to a full-blown cyberattack? Surprisingly, yes — and that's exactly what we saw in last week's activity. Hackers are getting better at hiding inside everyday actions: opening a file, running a project, or logging in like normal. No loud alerts. No obvious red flag...
PT-2025-17372
Name of the Vulnerable Software and Affected Versions Verisay Communication and Information Technology Industry and Trade Ltd. Co. Titarus versions prior to 2.144.4 Description The software contains an Improper Neutralization of Input During Web Page Generation issue, which allows for Cross-Site...
CVE-2025-24054 Under Active Attack—Steals NTLM Credentials on File Download
The U.S. Cybersecurity and Infrastructure Security Agency CISA on Thursday added a medium-severity security flaw impacting Microsoft Windows to its Known Exploited Vulnerabilities KEV catalog, following reports of active exploitation in the wild. The vulnerability, assigned the CVE identifier...
CVE-2025-24054
External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network...
CVE-2025-24054
CVE-2025-24054 is a Windows NTLM vulnerability allowing an attacker to induce NTLMv2-SSP hash disclosure by leveraging explorer.exe to fetch remote SMB resources via crafted file types (notably .library-ms and .lnk/.library-ms payloads). Public PoCs and exploits demonstrate creating malicious .li...
