NTLMRecon

概述 NTLMRecon 是 Sachin Kamath（AKA pwnfoo）所编写原始 NTLMRecon 工具的 Golang 版本。NTLMRecon 可用于对目标 Web 服务器进行暴力破解，以识别常见支持 NTLM 身份验证的应用程序端点。这些端点包括 Exchange Web Services 端点，后者通常可用于绕过多重身份验证。 该工具支持从暴露的 NTLM 身份验证端点收集元数据，包括计算机名、Active Directory 域名以及 Active Directory 林名。这些信息无需事先认证即可获取，只需向服务器发送 NTLM NEGOTIATEMESSAGE...

CVE-2024-4573-Mitigation-Script

Script di Mitigazione CVE-2024-4573 CVE-2024-43451 è una vulnerabilità nei sistemi che permettono l'autenticazione NTLM, un protocollo legacy che può essere sfruttato per attacchi di relay di credenziali o attacchi di forza bruta. Questa vulnerabilità si presenta quando NTLM è abilitato, lasciand...

Sharp-SMBExec

Sharp-SMBExec Una conversione nativa in C dello script PowerShell Invoke-SMBExec di Kevin Robertson. https://github.com/Kevin-Robertson/Invoke-TheHash/blob/master/Invoke-SMBExec.ps1 Realizzato per .NET 3.5 Utilizzo Sharp-SMBExec.exe hash:"hash" username:"username" domain:"domain.tld"...

cve-2019-1040-scanner

CVE-2019-1040 scanner Controlla la vulnerabilità CVE-2019-1040 su SMB. Lo script stabilirà una connessione con l'host target e invierà un'autenticazione NTLM non valida. Se questa viene accettata, l'host è vulnerabile a CVE-2019-1040 e puoi eseguire l'attacco MIC Remove con ntlmrelayx. Nota: ques...

SilentHound

SilentHound Enumera silenziosamente un dominio Active Directory tramite l'analisi LDAP di utenti, amministratori, gruppi, ecc. Creato da Nick Swink di Layer 8 Security. Installazione Utilizzo di pipenv metodo consigliato root@kitploit: python3 -m pip install --user pipenv git clone...

OWA-Password-Sprayer

OWA-Password-Sprayer OWA Password Sprayer Questo script Python facilita il password spraying contro gli endpoint di Outlook Web Access OWA. Il password spraying è una tecnica utilizzata per testare una singola password su più nomi utente, con l'obiettivo di trovare credenziali valide per accedere...

LDAPPER

Introduzione Questo strumento è stato scritto per risolvere molti dei problemi che riscontravo con ldapsearch e l'interazione con AD in generale. In particolare, lo strumento affronta i seguenti problemi: 1. Impossibilità di restituire più di mille risultati da AD. Questo strumento supporta la...

imposter

IMPOSTER यह एक पेंटेस्ट टूल है जिसका उपयोग रॉग नेटवर्क पर विंडोज क्लाइंट्स पर हमला करने के लिए किया जाता है। वर्तमान संस्करण विशेषताएँ LDAP को NTLM प्रमाणीकरण में डाउनग्रेड करें नेटवर्क लोकेशन अवेयरनेस को धोखा देने के लिए डोमेन कंट्रोलर के शुरुआती चरणों का नकली बनाएं सर्वर DNS, CLDAP, LDAP सेटअप...

latma

Lateral movement analyzer tool Lateral movement analyzer LATMA collects authentication logs from the domain and Azure AD environments and searches for potential lateral movement attacks and suspicious activity, the lateral movement can be in the AD environment or between cloud and on-prem. The to...

Ivanti EPM - Credential Coercion Vulnerability in GetHashForWildcard

A vulnerability in Ivanti Endpoint Manager EPM allows an unauthenticated attacker to coerce the EPM machine account credential via the GetHashForWildcard endpoint. The vulnerability exists due to improper input validation in the wildcard parameter, allowing an attacker to specify a remote UNC pat...

Ivanti EPM - Credential Coercion Vulnerability in GetHashForSingleFile

A vulnerability in Ivanti Endpoint Manager EPM allows an unauthenticated attacker to coerce the EPM machine account credential via the GetHashForSingleFile endpoint. The vulnerability exists due to improper input validation in the wildcard parameter, allowing an attacker to specify a remote UNC...

nimrm

nimrm Cliente de shell WinRM nativo escrito em Nim Versão 1.2.0 · Autor Chokri Hammedi blue0x1 · Licença MIT...

RemoteMonologue

RemoteMonologue RemoteMonologue ist eine Technik zum Sammeln von Windows-Anmeldeinformationen Credential Harvesting, die eine Remote-Kompromittierung von Benutzern ermöglicht, indem sie den RunAs-Schlüssel des interaktiven Benutzers ausnutzt und über DCOM NTLM-Authentifizierungen erzwingt. Lies...

UBUNTU-CVE-2026-72044

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

EUVD-2026-59002

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix stack buffer overflow in multichannel session-key copy Commit 4b706360ffb7 "ksmbd: fix multichannel binding and enforce channel limit" moved the binding-path session key out of the session-wide sess-sesskey CIFSKEYSIZE...

CVE-2026-72044

...

EUVD-2026-58373

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to access server resources with the privileges of an authenticated user due to improper authentication during NTLM session negotiation...

CVE-2026-68130

A flaw was found in ksmbd, a kernel module for SMB3 protocol server in the Linux kernel. An authenticated attacker can exploit a vulnerability in the NTLM NT LAN Manager authentication process. By manipulating specific fields in the NTLM authentication blob, an attacker can cause a victim's sessi...

CVE-2026-68130

In the Linux kernel, the following vulnerability has been resolved: ksmbd: defer destroyprevioussession until after NTLM authentication In ntlmauthenticate, destroyprevioussession is called using a user pointer resolved from the client-supplied NTLM blob username field before the NTLMv2 response ...

UBUNTU-CVE-2026-68130

In the Linux kernel, the following vulnerability has been resolved: ksmbd: defer destroyprevioussession until after NTLM authentication In ntlmauthenticate, destroyprevioussession is called using a user pointer resolved from the client-supplied NTLM blob username field before the NTLMv2 response ...