CVE-2025-33073

CVE-2025-33073 Exploit PoC pour la faille de réflexion NTLM SMB. Tout le crédit va à la recherche officielle : https://www.synacktiv.com/en/publications/ntlm-reflection-is-dead-long-live-ntlm-reflection-an-in-depth-analysis-of-cve-2025 Prérequis OS : Kali Linux la plupart des paquets sont...

CVE-2025-33073-checker

Script de vérification CVE-2025-33073 Ce script de vérification PoC approximatif teste des cibles pour la vulnérabilité CVE-2025-33073 en tentant d'effectuer des attaques de réflexion NTLM via une coercition d'authentification NTLM via le RPC de Samba. Pour ce faire, vous devez disposer d'un comp...

cupntlm-Automated-Exploit-For-CVE-2025-33073-

cupntlm CVE-2025-33073 — تجاوز انعكاس NTLM عبر إكراه DNS أداة استغلال مؤتمتة لبيئات Active Directory. نظرة عامة يقوم cupntlm بأتمتة سلسلة هجوم انعكاس/تتابع NTLM التي تستغل CVE-2025-33073. يجمع بين حقن سجلات DNS، وإكراه المصادقة القسري PetitPotam، وتتابع NTLM في سير عمل واحد. تدعم الأداة وضعين...

CVE-2025-33073

CVE-2025-33073 — انعكاس NTLM في عميل SMB بنظام Windows وتصعيد الصلاحيات تقرير بحثي من إعداد Sentinel AI Defense. تحليل دفاعي فقط — لا يُنشر هنا أي استغلال عملي أو PoC. ثغرة تحكم غير سليم في الوصول في عميل SMB بنظام Windows تُحيي تقنيات انعكاس NTLM التي كان يُعتقد أنها مُعالجة — مما يتيح للمهاجم...

CVE-2025-54918-POC

CVE-2025-54918 – Доказательство концепции PoC ⚠️ Важное уведомление ВАЖНО: Для тестирования CVE-2025-54918 необходимо создать DNS-запись в целевой среде Active Directory. Всегда консультируйтесь с клиентом и получайте явное разрешение перед тестированием, так как это может повлиять на поведение DN...

SMB-CVE-2025-33073

SMB-CVE-2025-33073 Honeypot متقدم لبروتوكول SMB: بحث وتنفيذ حول CVE-2025-33073 Honeypot متقدم لبروتوكول SMB: بحث وتحليل جنائي حول CVE-2025-33073 📌 نظرة عامة على المشروع يقدم هذا المشروع بيئة Honeypot عالية التفاعل مصممة لبحث واكتشاف وتحليل محاولات الاستغلال التي تستهدف بروتوكول SMB Server Message...

Exploit for Improper Access Control in Microsoft

CVE-2025-33073 PoC Exploit for the NTLM reflection SMB flaw...

Microsoft Windows 10.0.17134.648 HTTP -> SMB NTLM Reflection Leads to Privilege Elevation Exploit

Exploit for windows platform in category local exploits Microsoft Windows 10.0.17134.648 - HTTP - SMB NTLM Reflection Leads to Privilege Elevation Exploit VULNERABILITY DETAILS It's possible to use the NTLM reflection attack to escape a browser sandbox in the case where the sandboxed process is...

Microsoft Windows 10.0.17134.648 - HTTP -> SMB NTLM Reflection Leads to Privilege Elevation

VULNERABILITY DETAILS It's possible to use the NTLM reflection attack to escape a browser sandbox in the case where the sandboxed process is allowed to create TCP sockets. In particular, I was able to combine the issues mentioned below with a bug in Chromium to escape its sandbox. HTTP - SMB NTLM...

Microsoft Exchange Server NTLM Reflection EWS User Impersonation Vulnerability

This vulnerability allows remote attackers to impersonate arbitrary users on vulnerable installations of Microsoft Exchange Server. Authentication is required to exploit this vulnerability. The specific flaw exists within the use of NTLM authentication in Exchange Server. NTLM responses produced ...

Microsoft Windows 8.1 - DCOM DCERPC Local NTLM Reflection Privilege Escalation (MS15-076)

Microsoft Windows 8.1 - DCOM DCERPC Local NTLM Reflection Privilege Escalation MS15-076 Source: https://github.com/monoxgas/Trebuchet Trebuchet MS15-076 CVE-2015-2370 Privilege Escalation Copies a file to any privileged location on disk Compiled with VS2015, precompiled exe in Binary directory...

Default Setting in Windows 7, 8.1 Could Allow Privilege Escalation

A default setting in both Windows 7 and 8.1 could allow local users to elevate privileges and in some situations, escape application sandboxes. The issue, something that leaves all current Windows client installations vulnerable, lies in the way the operating system handles authentication. In som...

SuSE 10 Security Update : XULRunner (ZYPP Patch Number 6734)

The Mozilla XULRunner engine was updated to version 1.9.0.16, fixing lots of bugs and various security issues. The following issues were fixed : - Crashes with evidence of memory corruption 1.9.0.16. MFSA 2009-65 / CVE-2009-3979 / CVE-2009-3981 - bmo487872 NTLM reflection vulnerability. MFSA...

SuSE 10 Security Update : Mozilla Firefox (ZYPP Patch Number 6735)

The Mozilla Firefox was updated to version 3.5.6, fixing lots of bugs and various security issues. The following issues were fixed : - Crashes with evidence of memory corruption rv:1.9.1.6. MFSA 2009-65 / CVE-2009-3979 / CVE-2009-3980 / CVE-2009-3982 - bmo504843,bmo523816 Memory safety fixes in...

SuSE9 Security Update : epiphany (YOU Patch Number 12616)

This update brings Mozilla SeaMonkey to 1.1.19 fixing various bugs and security issues. The following security issues are fixed : - Mozilla developers took fixes from previously fixed memory safety bugs in newer Mozilla-based products and ported them to the Mozilla 1.8.1 branch so they can be...

SeaMonkey < 1.1.19 Multiple Vulnerabilities

The installed version of SeaMonkey is earlier than 1.1.19. Such versions are potentially affected by the following security issues : - The columns of a XUL tree element can be manipulated in a particular way that would leave a pointer owned by the column pointing to freed memory. MFSA 2009-49 - A...

SeaMonkey < 1.1.19 Multiple Vulnerabilities

Binary data 5479.prm...

Mozilla SeaMonkey < 1.1.19 Multiple Vulnerabilities

Binary data 801348.prm...

mozilla -- multiple vulnerabilities

Mozilla Project reports: MFSA 2010-07 Fixes for potentially exploitable crashes ported to the legacy branch MFSA 2010-06 Scriptable plugin execution in SeaMonkey mail MFSA 2009-68 NTLM reflection vulnerability MFSA 2009-62 Download filename spoofing with RTL override MFSA 2009-59 Heap buffer...

openSUSE Security Update : seamonkey (seamonkey-1738)

The Mozilla SeaMonkey browser suite was updated to version 2.0.1, fixing lots of bugs and various security issues. The following issues were fixed : - MFSA 2009-65/CVE-2009-3979/CVE-2009-3981 Crashes with evidence of memory corruption 1.9.0.16 - MFSA 2009-68/CVE-2009-3983 bmo487872 NTLM reflectio...