CVE-2025-54918-POC

CVE-2025-54918 – Preuve de concept PoC ⚠️ Avis important IMPORTANT : Pour tester CVE-2025-54918 , vous devez créer un enregistrement DNS dans l'environnement Active Directory cible. Consultez toujours le client et obtenez une autorisation explicite avant de tester, car cela peut avoir un impact su...

CVE-2025-33073

CVE-2025-33073 Exploit PoC pour la faille de réflexion NTLM SMB. Tout le crédit va à la recherche officielle : https://www.synacktiv.com/en/publications/ntlm-reflection-is-dead-long-live-ntlm-reflection-an-in-depth-analysis-of-cve-2025 Prérequis OS : Kali Linux la plupart des paquets sont...

CVE-2025-33073-checker

Script de vérification CVE-2025-33073 Ce script de vérification PoC approximatif teste des cibles pour la vulnérabilité CVE-2025-33073 en tentant d'effectuer des attaques de réflexion NTLM via une coercition d'authentification NTLM via le RPC de Samba. Pour ce faire, vous devez disposer d'un comp...

CVE-2025-33073

CVE-2025-33073 Exploit PoC pour la faille SMB de réflexion NTLM. Tout le crédit revient à la recherche officielle : https://www.synacktiv.com/publications/ntlm-reflection-is-dead-long-live-ntlm-reflection-an-in-depth-analysis-of-cve-2025 Prérequis OS : Kali Linux la plupart des paquets sont...

CVE-2026-24294

CVE-2026-24294 - Élévation de privilèges locale par réflexion NTLM via port SMB arbitraire Élévation de privilèges locale sur Windows Server 2025 via la réflexion NTLM, abusant de la fonctionnalité de port SMB arbitraire introduite dans Windows 11 24H2 / Server 2025. Vulnérabilité Windows 11 24H2...

cupntlm-Automated-Exploit-For-CVE-2025-33073-

cupntlm CVE-2025-33073 — Contournement de réflexion NTLM via coercition DNS Outil d'exploitation automatisé pour les environnements Active Directory. Aperçu cupntlm automatise la chaîne d'attaque par réflexion/relais NTLM exploitant CVE-2025-33073. Il combine l'injection d'enregistrements DNS, la...

CVE-2025-33073

CVE-2025-33073 — Réflexion NTLM du client SMB Windows : Élévation de privilèges Analyse rédigée par Sentinel AI Defense. Analyse défensive uniquement — aucun exploit fonctionnel ni PoC n'est publié ici. Une faille de contrôle d'accès inapproprié dans le client SMB Windows qui relance des techniqu...

SMB-CVE-2025-33073

SMB-CVE-2025-33073 Honeypot SMB avancé : Recherche & implémentation de CVE-2025-33073 Honeypot SMB avancé : Recherche et forensique de CVE-2025-33073 📌 Aperçu du projet Ce projet présente un environnement Honeypot à haute interaction conçu pour rechercher, détecter et analyser les tentatives...

Exploit for Improper Access Control in Microsoft

CVE-2025-33073 — Windows SMB Client NTLM Reflection EoP !CV...

Exploit for Improper Access Control in Microsoft

CVE-2025-33073 PoC Exploit for the NTLM reflection SMB flaw...

Microsoft Windows 10.0.17134.648 HTTP -> SMB NTLM Reflection Leads to Privilege Elevation Exploit

Exploit for windows platform in category local exploits Microsoft Windows 10.0.17134.648 - HTTP - SMB NTLM Reflection Leads to Privilege Elevation Exploit VULNERABILITY DETAILS It's possible to use the NTLM reflection attack to escape a browser sandbox in the case where the sandboxed process is...

Microsoft Windows 10.0.17134.648 - HTTP -> SMB NTLM Reflection Leads to Privilege Elevation

VULNERABILITY DETAILS It's possible to use the NTLM reflection attack to escape a browser sandbox in the case where the sandboxed process is allowed to create TCP sockets. In particular, I was able to combine the issues mentioned below with a bug in Chromium to escape its sandbox. HTTP - SMB NTLM...

Microsoft Exchange Server NTLM Reflection EWS User Impersonation Vulnerability

This vulnerability allows remote attackers to impersonate arbitrary users on vulnerable installations of Microsoft Exchange Server. Authentication is required to exploit this vulnerability. The specific flaw exists within the use of NTLM authentication in Exchange Server. NTLM responses produced ...

Microsoft Windows 8.1 - DCOM DCERPC Local NTLM Reflection Privilege Escalation (MS15-076)

Microsoft Windows 8.1 - DCOM DCERPC Local NTLM Reflection Privilege Escalation MS15-076 Source: https://github.com/monoxgas/Trebuchet Trebuchet MS15-076 CVE-2015-2370 Privilege Escalation Copies a file to any privileged location on disk Compiled with VS2015, precompiled exe in Binary directory...

Default Setting in Windows 7, 8.1 Could Allow Privilege Escalation

A default setting in both Windows 7 and 8.1 could allow local users to elevate privileges and in some situations, escape application sandboxes. The issue, something that leaves all current Windows client installations vulnerable, lies in the way the operating system handles authentication. In som...

SuSE 10 Security Update : XULRunner (ZYPP Patch Number 6734)

The Mozilla XULRunner engine was updated to version 1.9.0.16, fixing lots of bugs and various security issues. The following issues were fixed : - Crashes with evidence of memory corruption 1.9.0.16. MFSA 2009-65 / CVE-2009-3979 / CVE-2009-3981 - bmo487872 NTLM reflection vulnerability. MFSA...

SuSE 10 Security Update : Mozilla Firefox (ZYPP Patch Number 6735)

The Mozilla Firefox was updated to version 3.5.6, fixing lots of bugs and various security issues. The following issues were fixed : - Crashes with evidence of memory corruption rv:1.9.1.6. MFSA 2009-65 / CVE-2009-3979 / CVE-2009-3980 / CVE-2009-3982 - bmo504843,bmo523816 Memory safety fixes in...

SuSE9 Security Update : epiphany (YOU Patch Number 12616)

This update brings Mozilla SeaMonkey to 1.1.19 fixing various bugs and security issues. The following security issues are fixed : - Mozilla developers took fixes from previously fixed memory safety bugs in newer Mozilla-based products and ported them to the Mozilla 1.8.1 branch so they can be...

Mozilla SeaMonkey < 1.1.19 Multiple Vulnerabilities

Binary data 801348.prm...

SeaMonkey < 1.1.19 Multiple Vulnerabilities

The installed version of SeaMonkey is earlier than 1.1.19. Such versions are potentially affected by the following security issues : - The columns of a XUL tree element can be manipulated in a particular way that would leave a pointer owned by the column pointing to freed memory. MFSA 2009-49 - A...