Titanis

简介 Titanis 是一个用 C 编写的协议实现与命令行工具库，用于与 Windows 环境交互。它基于 .NET 8，且支持跨平台（Windows 和 Linux）。部分已实现的协议包括： SMB2（MS-SMB2） SMB 2.x 和 3.x，最高至 3.1.1 消息安全功能，如签名和加密 支持文件系统控制代码（MS-FSCC） DFS 链接（MS-DFSC） MSRPC（MS-RPCE） 端点映射器 DCOM（MS-DCOM） EFS（MS-EFSR） LSA（MS-LSAD 和 MS-LSAT） 远程注册表（MS-RRP） 支持备份语义 包含 SAM 转储功能...

RDL-detect

Verificación del servicio Remote Desktop Licensing Referencia: https://github.com/fortra/impacket/blob/master/examples/rpcdump.py Enumera los servicios abiertos a través de MSRPC y determina si incluye Terminal Server Licensing según el UUID: 3d267954-eeb7-11d1-b94e-00c04fa3080d Uso: python3...

CVE-2021-31800

Impacket SECUREAUTH LABS。版权所有 C 2022 SecureAuth Corporation。保留所有权利。 Impacket 是一个用于处理网络协议的 Python 类集合。Impacket 专注于提供对数据包的低级编程访问，并且对于某些协议（例如 SMB1-3 和 MSRPC），还提供了协议实现本身。数据包可以从头构建，也可以从原始数据解析，面向对象的 API 使得处理深层协议层次结构变得简单。该库提供了一组工具，作为在该库上下文中可以实现的功能示例。 部分工具的描述可以在 SecureAuth Labs 的开源网站 上找到。 包含哪些协议？ 以太网、Lin...

impacket

Impacket 版权所有 Fortra, LLC 及其附属公司。保留所有权利。 Impacket 最初由 SecureAuth 创建，现由 Fortra 的核心安全团队维护。 Impacket 是一个用于处理网络协议的 Python 类集合。Impacket 专注于为数据包提供低级编程访问，对于某些协议（如 SMB1-3 和 MSRPC）还提供协议实现本身。数据包可以从头构建，也可以从原始数据解析，面向对象的 API 使得处理深层次协议层级变得简单。该库提供了一套工具作为库功能使用的示例。 支持哪些协议？ Ethernet, Linux "Cooked" 捕获。 IP, TCP, UD...

MSRPC-to-ATTACK

MSRPC-To-ATT&CK 一个将常用 MSRPC 协议映射到 MITRE ATT&CK 的仓库，同时提供有关潜在活动指标、防御机会和相关 RPC 信息的上下文。 MSRPC 协议列表： MS-SCMR：服务控制管理器远程协议 MS-SCMR.md MS-DRSR：目录复制服务远程协议 MS-DRSR.md MS-RRP：Windows 远程注册表远程协议 MS-RRP.md MS-TSCH：任务计划程序服务远程协议 MS-TSCH.md MS-WKST：工作站服务远程协议 MS-WKST.md MS-SRVS：服务器服务远程协议 MS-SRVS.md MS-RPRN：打印系统远程协...

EUVD-2013-4541

Malware in sbrugna...

EternalBlueExploitation

Eternal Blue Exploitation Description For this project, I expl...

Uncovering weaknesses in Apple macOS and VMWare vCenter: 12 vulnerabilities in RPC implementation

Cisco Talos discovered 12 memory corruption vulnerabilities in MSRPC implementations on Apple macOS and VMWare vCenter. - Seven vulnerabilities affect Apple macOS only. - Two vulnerabilities affect VMWare vCenter. - Three vulnerabilities affect both. For more on these individual vulnerabilities,...

Exploit for Path Traversal in Secureauth Impacket

Impacket ======== !Latest Versionhttps://img.shields.io/pyp...

A Definitive Guide to the Remote Procedure Call (RPC) Filter

...

Apache Log4Shell RCE detection via callback correlation (Direct Check MSRPC)

Binary data apachelog4shellmsrpc.nbin...

Experts Detail A Recent Remotely Exploitable Windows Vulnerability

More details have emerged about a security feature bypass vulnerability in Windows NT LAN Manager NTLM that was addressed by Microsoft as part of its monthly Patch Tuesday updates earlier this month. The flaw, tracked as CVE-2021-1678 CVSS score 4.3, was described as a "remotely exploitable" bug...

Microsoft Windows 10.0.17134.648 HTTP -> SMB NTLM Reflection Leads to Privilege Elevation Exploit

Exploit for windows platform in category local exploits Microsoft Windows 10.0.17134.648 - HTTP - SMB NTLM Reflection Leads to Privilege Elevation Exploit VULNERABILITY DETAILS It's possible to use the NTLM reflection attack to escape a browser sandbox in the case where the sandboxed process is...

CVE-2018-8407

An information disclosure vulnerability exists when "Kernel Remote Procedure Call Provider" driver improperly initializes objects in memory, aka "MSRPC Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019,...

Information disclosure

An information disclosure vulnerability exists when "Kernel Remote Procedure Call Provider" driver improperly initializes objects in memory, aka "MSRPC Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019,...

CVE-2018-8407

CVE-2018-8407 is an information disclosure vulnerability in the Kernel Remote Procedure Call Provider driver that occurs when objects are not properly initialized in memory. The vulnerability affects multiple Windows releases, including Windows 7, Windows 8.1, Windows 10 and various Windows Serve...

Microsoft Windows MSRPC CVE-2018-8407 Local Information Disclosure Vulnerability

Description Microsoft Windows is prone to a local information-disclosure vulnerability. A local attacker can leverage this issue to disclose sensitive information that may aid in further attacks. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Versi...

smb-webexec-exploit NSE Script

Attempts to run a command via WebExService, using the WebExec vulnerability. Given a Windows account local or domain, this will start an arbitrary executable with SYSTEM privileges over the SMB protocol. The argument webexeccommand will run the command directly. It may or may not start with a GUI...

smb-vuln-webexec NSE Script

A critical remote code execution vulnerability exists in WebExService WebExec. See also: smb-webexec-exploit.nse Script Arguments smbdomain, smbhash, smbnoguest, smbpassword, smbtype, smbusername See the documentation for the smbauth library. randomseed, smbbasic, smbport, smbsign See the...

Impacket - Collection Of Python Classes For Working With Network Protocols

Impacket is a collection of Python classes for working with network protocols. Impacket is focused on providing low-level programmatic access to the packets and for some protocols e.g. SMB1-3 and MSRPC the protocol implementation itself. Packets can be constructed from scratch, as well as parsed...