CVE-2025-33073

CVE-2025-33073 — Riflessione NTLM EoP del Client SMB di Windows Analisi di ricerca di Sentinel AI Defense. Solo analisi difensiva — nessun exploit funzionante o PoC viene pubblicato qui. Un difetto di controllo degli accessi improprio nel client SMB di Windows che ripristina tecniche di riflessio...

CVE-2025-33073

CVE-2025-33073 PoC Exploit per la falla SMB di reflection NTLM. Tutto il merito va alla ricerca ufficiale: https://www.synacktiv.com/en/publications/ntlm-reflection-is-dead-long-live-ntlm-reflection-an-in-depth-analysis-of-cve-2025 Prerequisiti OS: Kali Linux ha la maggior parte dei pacchetti...

CVE-2025-33073-checker

CVE-2025-33073 Script di Verifica Questo script di verifica PoC approssimativo testa i target per la vulnerabilità CVE-2025-33073 tentando di eseguire attacchi di riflessione NTLM utilizzando la coercizione dell'autenticazione NTLM tramite Samba RPC; per farlo è necessario avere un account con...

cupntlm-Automated-Exploit-For-CVE-2025-33073-

cupntlm CVE-2025-33073 — تجاوز انعكاس NTLM عبر إكراه DNS أداة استغلال مؤتمتة لبيئات Active Directory. نظرة عامة يقوم cupntlm بأتمتة سلسلة هجوم انعكاس/تتابع NTLM التي تستغل CVE-2025-33073. يجمع بين حقن سجلات DNS، وإكراه المصادقة القسري PetitPotam، وتتابع NTLM في سير عمل واحد. تدعم الأداة وضعين...

CVE-2025-54918-POC

CVE-2025-54918 – Prova di Concetto PoC ⚠️ Avviso Importante IMPORTANTE: Per testare CVE-2025-54918 , è necessario creare un record DNS nell'ambiente Active Directory di destinazione. Consulta sempre il cliente e ottieni l'autorizzazione esplicita prima di testare, poiché ciò può influenzare il...

SMB-CVE-2025-33073

SMB-CVE-2025-33073 Advanced SMB Honeypot: Ricerca & Implementazione di CVE-2025-33073 Advanced SMB Honeypot: Ricerca & Forensics su CVE-2025-33073 📌 Panoramica del Progetto Questo progetto presenta un ambiente Honeypot ad alta interazione progettato per ricercare, rilevare e analizzare i tentativ...

Exploit for Improper Access Control in Microsoft

CVE-2025-33073 PoC Exploit for the NTLM reflection SMB flaw...

Microsoft Windows 10.0.17134.648 HTTP -> SMB NTLM Reflection Leads to Privilege Elevation Exploit

Exploit for windows platform in category local exploits Microsoft Windows 10.0.17134.648 - HTTP - SMB NTLM Reflection Leads to Privilege Elevation Exploit VULNERABILITY DETAILS It's possible to use the NTLM reflection attack to escape a browser sandbox in the case where the sandboxed process is...

Microsoft Windows 10.0.17134.648 - HTTP -> SMB NTLM Reflection Leads to Privilege Elevation

VULNERABILITY DETAILS It's possible to use the NTLM reflection attack to escape a browser sandbox in the case where the sandboxed process is allowed to create TCP sockets. In particular, I was able to combine the issues mentioned below with a bug in Chromium to escape its sandbox. HTTP - SMB NTLM...

Microsoft Exchange Server NTLM Reflection EWS User Impersonation Vulnerability

This vulnerability allows remote attackers to impersonate arbitrary users on vulnerable installations of Microsoft Exchange Server. Authentication is required to exploit this vulnerability. The specific flaw exists within the use of NTLM authentication in Exchange Server. NTLM responses produced ...

Microsoft Windows 8.1 - DCOM DCERPC Local NTLM Reflection Privilege Escalation (MS15-076)

Microsoft Windows 8.1 - DCOM DCERPC Local NTLM Reflection Privilege Escalation MS15-076 Source: https://github.com/monoxgas/Trebuchet Trebuchet MS15-076 CVE-2015-2370 Privilege Escalation Copies a file to any privileged location on disk Compiled with VS2015, precompiled exe in Binary directory...

Default Setting in Windows 7, 8.1 Could Allow Privilege Escalation

A default setting in both Windows 7 and 8.1 could allow local users to elevate privileges and in some situations, escape application sandboxes. The issue, something that leaves all current Windows client installations vulnerable, lies in the way the operating system handles authentication. In som...

SuSE 10 Security Update : XULRunner (ZYPP Patch Number 6734)

The Mozilla XULRunner engine was updated to version 1.9.0.16, fixing lots of bugs and various security issues. The following issues were fixed : - Crashes with evidence of memory corruption 1.9.0.16. MFSA 2009-65 / CVE-2009-3979 / CVE-2009-3981 - bmo487872 NTLM reflection vulnerability. MFSA...

SuSE 10 Security Update : Mozilla Firefox (ZYPP Patch Number 6735)

The Mozilla Firefox was updated to version 3.5.6, fixing lots of bugs and various security issues. The following issues were fixed : - Crashes with evidence of memory corruption rv:1.9.1.6. MFSA 2009-65 / CVE-2009-3979 / CVE-2009-3980 / CVE-2009-3982 - bmo504843,bmo523816 Memory safety fixes in...

SuSE9 Security Update : epiphany (YOU Patch Number 12616)

This update brings Mozilla SeaMonkey to 1.1.19 fixing various bugs and security issues. The following security issues are fixed : - Mozilla developers took fixes from previously fixed memory safety bugs in newer Mozilla-based products and ported them to the Mozilla 1.8.1 branch so they can be...

SeaMonkey < 1.1.19 Multiple Vulnerabilities

The installed version of SeaMonkey is earlier than 1.1.19. Such versions are potentially affected by the following security issues : - The columns of a XUL tree element can be manipulated in a particular way that would leave a pointer owned by the column pointing to freed memory. MFSA 2009-49 - A...

SeaMonkey < 1.1.19 Multiple Vulnerabilities

Binary data 5479.prm...

Mozilla SeaMonkey < 1.1.19 Multiple Vulnerabilities

Binary data 801348.prm...

mozilla -- multiple vulnerabilities

Mozilla Project reports: MFSA 2010-07 Fixes for potentially exploitable crashes ported to the legacy branch MFSA 2010-06 Scriptable plugin execution in SeaMonkey mail MFSA 2009-68 NTLM reflection vulnerability MFSA 2009-62 Download filename spoofing with RTL override MFSA 2009-59 Heap buffer...

openSUSE Security Update : seamonkey (seamonkey-1738)

The Mozilla SeaMonkey browser suite was updated to version 2.0.1, fixing lots of bugs and various security issues. The following issues were fixed : - MFSA 2009-65/CVE-2009-3979/CVE-2009-3981 Crashes with evidence of memory corruption 1.9.0.16 - MFSA 2009-68/CVE-2009-3983 bmo487872 NTLM reflectio...