printerbugnew

TCP를 통한 순수 RPC 프린터 스풀러 트리거 Windows 11 22H2+ / Windows Server 2025 용 사용법 printerbugnew.py username password domain attackerhost tcpport 예제 익명 연결 printerbugnew.py 192.168.1.100 자격 증명 포함 printerbugnew.py 192.168.1.100 admin Password123 DOMAIN 다른 호스트공격자로 백커넥트 트리거 printerbugnew.py 192.168.1.100 admin...

NegoExRelay

Negoexrelayx - Negoex 릴레이 도구 Kerberos PKU2U 및 NegoEx를 악용하기 위한 도구 키트입니다. impacket이 필요합니다. 최신 버전을 사용하려면 impacket을 git에서 직접 설치하는 것이 좋습니다. negoexrelayx.py 이 도구를 사용하면 NegoExPKU2U 사용 인증을 다른 컴퓨터로 릴레이하여 자격 증명을 알지 못해도 인증할 수 있습니다. Ntlmrelayx와 유사합니다. NegoEx relay tool. By @rubinmor Main options: -h, --help...

CVE-2024-4573-Mitigation-Script

CVE-2024-4573-완화-스크립트 CVE-2024-43451은 NTLM 인증을 허용하는 시스템에서 발생하는 취약점입니다. NTLM은 자격 증명 중계 공격이나 무차별 대입 공격에 악용될 수 있는 레거시 프로토콜입니다. 이 취약점은 NTLM이 활성화되어 있을 때 발생하며, 시스템이 무단 액세스에 취약해지고 최소한의 상호작용만으로도 공격자에게 사용자의 NTLMv2 해시가 노출될 가능성이 있습니다. 이 탐지 스크립트는 다음과 같이 작동합니다: 레지스트리 경로 확인: 레지스트리 경로...

MAL-2026-14191 Malicious code in test_payload_folder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 866092759174b326eced94e3854f31ba300d25d84387348e6b33119f4aa12caf The package exposes a startVoiceJoinerconfig API that accepts a caller-supplied Discord USERTOKEN and optional USERTOKEN2 ostensibly for gateway logi...

Microsoft Windows HTTP to LDAP Relay

This module supports running an HTTP server which validates credentials, and then attempts to execute a relay attack against an LDAP server on the configured RHOSTS hosts. It is not possible to relay NTLMv2 to LDAP due to the Message Integrity Check MIC. As a result, this will only work with...

EUVD-2026-4974

SmarterTools SmarterMail versions prior to build 9518 contain an unauthenticated path coercion vulnerability in the background-of-the-day preview endpoint. The application base64-decodes attacker-supplied input and uses it as a filesystem path without validation. On Windows systems, this allows U...

📄 Microsoft Windows File Explorer NTLM Hash Disclosure

Microsoft Windows File Explorer in Windows 10 and 11 contains a critical NTLM hash disclosure vulnerability that allows attackers to capture user authentication credentials by exploiting the automatic parsing of .library-ms files from ZIP archives, leading to potential domain compromise through...

CVE-2025-30201

Wazuh is a free and open source platform used for threat prevention, detection, and response. Prior to version 4.13.0, a vulnerability in Wazuh Agent allows authenticated attackers to force NTLM authentication through malicious UNC paths in various agent configuration settings, potentially leadin...

Microsoft Windows LNK File Parsing Improper Input Validation NTLM Relay Vulnerability

This vulnerability allows remote attackers to relay NTLM credentials on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of L...

CVE-2025-6444

ServiceStack GetErrorResponse Improper Input Validation NTLM Relay Vulnerability. This vulnerability allows remote attackers to relay NTLM credentials on affected installations of ServiceStack. Interaction with this library is required to exploit this vulnerability but attack vectors may vary...

External Control of File Name or Path

Overview ServiceStack is a simple and fast alternative to WCF, MVC and Web API in one cohesive framework for all your services and web apps. Affected versions of this package are vulnerable to External Control of File Name or Path in the url parameter to the GetErrorResponse method. An attacker c...

CVE-2025-6444

ServiceStack GetErrorResponse Improper Input Validation NTLM Relay Vulnerability. This vulnerability allows remote attackers to relay NTLM credentials on affected installations of ServiceStack. Interaction with this library is required to exploit this vulnerability but attack vectors may vary...

CVE-2025-6444 ServiceStack GetErrorResponse Improper Input Validation NTLM Relay Vulnerability

ServiceStack GetErrorResponse Improper Input Validation NTLM Relay Vulnerability. This vulnerability allows remote attackers to relay NTLM credentials on affected installations of ServiceStack. Interaction with this library is required to exploit this vulnerability but attack vectors may vary...

PT-2025-26618 · Unknown · Servicestack

Name of the Vulnerable Software and Affected Versions: ServiceStack affected versions not specified Description: This issue allows remote attackers to relay NTLM credentials on affected installations of ServiceStack. The specific flaw exists within the implementation of the GetErrorResponse metho...

CVE-2022-29847

In Progress Ipswitch WhatsUp Gold 21.0.0 through 21.1.1, and 22.0.0, it is possible for an unauthenticated attacker to invoke an API transaction that would allow them to relay encrypted WhatsUp Gold user credentials to an arbitrary host...

PT-2025-2686

Name of the Vulnerable Software and Affected Versions Mintty affected versions not specified Description The issue is related to improper input validation in Mintty's path conversion, allowing remote attackers to relay NTLM credentials on affected installations. This requires user interaction,...

PT-2023-8650 · Kyocera · Kyocera Device Manager

Name of the Vulnerable Software and Affected Versions: Kyocera Device Manager versions prior to 3.1.1213.0 Description: The issue is related to incorrect restriction of a directory path with limited access. Exploitation may allow a remote attacker to bypass the authentication process. The...

CVE-2022-29847

In Progress Ipswitch WhatsUp Gold 21.0.0 through 21.1.1, and 22.0.0, it is possible for an unauthenticated attacker to invoke an API transaction that would allow them to relay encrypted WhatsUp Gold user credentials to an arbitrary host...

CVE-2022-29847: Server-Side Request Forgery (SSRF)

In Progress Ipswitch WhatsUp Gold 21.0.0 through 21.1.1, and 22.0.0, it is possible for an unauthenticated attacker to invoke an API transaction that would allow them to relay encrypted WhatsUp Gold user credentials to an arbitrary host...

Progress Software WhatsUp Gold 代码问题漏洞

Progress Software WhatsUp Gold is a network monitoring software from Progress Software, Inc. It is used to monitor the entire network infrastructure as well as applications, configurations and network traffic. A security vulnerability in Progress Software WhatsUp Gold versions 21.0.0 through 21.1...