CVE-2025-24071_POC

비디오 튜토리얼 Windows 라이브러리 파일 생성기 CVE-2025-24071/CVE-2025-24054 데모 구성 가능한 네트워크 경로를 사용하여 Windows 라이브러리 파일.library-ms 생성을 시연하는 최소한의 Rust 애플리케이션입니다. 개요 이 프로젝트는 네트워크 공유를 가리키는 Windows Library Description.library-ms 파일을 생성합니다. 이는 CVE-2025-24071 취약점이 GitHub Actions를 통해 어떻게 악용될 수 있는지 시연하기 위해 설계되었습니다. ⚠️ 교육...

CVE-2025-24071_PoC

CVE-2025-24071 / CVE-2025-24054 PoC 수정: 마이크로소프트가 CVE-2025-24071을 CVE-2025-24054로 이름 변경 🤔 개요 이 Windows 취약점은 특히 'explorer.exe'에서 발생하며, 공격자가 .zip 파일을 추출하도록 하는 것만으로 피해자로부터 NetNTLMv2 해시를 얻을 수 있습니다. 사용법 스크립트 실행 python PoC.py test 192.168.1.45 "exploit.zip"을 대상에게 전송한 후, Responder를 사용하여 NTLMv2 해시를 수신할 수...

CVE-2025-24071-POC

sudo apt update sudo apt install wine wine CVE-2025-24071-POC.exe -i 10.10.14.8 -n try ZIP作成: try.zip impacket-smbserver: smbserver.py try /root/smbshare -smb2support -ip 10.10.14.8 -debug Impacket Exegol fork v0.13.0.dev0+20250723.125503.b5db2dd7 - Copyright Fortra, LLC and its affiliated...

CVE-2025-24054_PoC

CVE-2025-24054PoC CVE-2025-24054/CVE-2025-24071 の概念実証...

CVE-2025-24071

이 저장소에는 README가 없습니다...

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Microsoft

CVE-2025-24071 — Windows File Explorer Spoofing / NTLM Hash Di...

CVE-2025-24071-POC

sudo apt update sudo apt install wine wine CVE-2025-24071-POC.exe -i 10.10.14.8 -n try ZIP creado: try.zip impacket-smbserver: smbserver.py try /root/smbshare -smb2support -ip 10.10.14.8 -debug Impacket Exegol fork v0.13.0.dev0+20250723.125503.b5db2dd7 - Copyright Fortra, LLC and its affiliated...

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Microsoft

CVE-2025-24071 This is a python PoC...

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Microsoft

CVE-2025-24071PoC CVE-2025-24071: NTLM Hash Leak via RAR/ZIP...

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Microsoft

CVE-2025-24071-POC-NTLMHashDisclosure - Triggers automatic SMB...

SMB NTLM Hash Leakage

This is a proof of concept for exploiting CVE-2025-24071, a vulnerability in Windows that allows NTLM hash leakage via .library-ms files. This version diverges slightly from others by using a .tar archive instead of a .zip, which improves compatibility in SMB-only environments...

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Microsoft

Blackash-CVE-2025-24071 CVE-2025-24071: NTLM Hash Leak via...

Windows File Explorer Windows 11 (23H2) - NTLM Hash Disclosure

!/usr/bin/env python3 Exploit Title: Windows File Explorer Windows 11 23H2 - NTLM Hash Disclosure Exploit Author: Mohammed Idrees Banyamer Twitter/GitHub:https://github.com/mbanyamer Date: 2025-05-27 CVE: CVE-2025-24071 Vendor: Microsoft Affected Versions: Windows 10/11 All supporting .library-ms...

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Microsoft

CVE-2025-24071 PoC SMB + TAR Extraction Method This is a Po...

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Microsoft

CVE-2025-24071 - Windows File Explorer Spoofing Vulnerability...

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Microsoft

Video Tutorial !CVE-2025-24071 Demohttps://img.youtube.co...

Microsoft Credits EncryptHub, Hacker Behind 618+ Breaches, for Disclosing Windows Flaws

A likely lone wolf actor behind the EncryptHub persona was acknowledged by Microsoft for discovering and reporting two security flaws in Windows last month, painting a picture of a "conflicted" individual straddling a legitimate career in cybersecurity and pursuing cybercrime. In a new extensive...

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Microsoft

CVE-2025-24071 / CVE-2025-24054 PoC Edit: MICROSOFT HAS BEE...

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Microsoft

CVE-2025-24071 This Python script is designed to demonstrate...

About Spoofing – Windows File Explorer (CVE-2025-24071) vulnerability

About Spoofing - Windows File Explorer CVE-2025-24071 vulnerability. The vulnerability is from the March Microsoft Patch Tuesday. The VM vendors didn't highlight it in their reviews. A week later, on March 18, researcher 0x6rss published a write-up and a PoC exploit. According to him, the...