31 matches found
CVE-2025-33073
CVE-2025-33073 PoC Exploit for the NTLM reflection SMB flaw. All credits go to the offical research: https://www.synacktiv.com/en/publications/ntlm-reflection-is-dead-long-live-ntlm-reflection-an-in-depth-analysis-of-cve-2025 Prerequisites OS: Kali Linux has most packages pre-installed. NetExec N...
CVE-2026-24294
CVE-2026-24294 - Local NTLM Reflection LPE via SMB Arbitrary Port Local privilege escalation on Windows Server 2025 via NTLM reflection, abusing the SMB arbitrary port feature introduced in Windows 11 24H2 / Server 2025. Vulnerability Windows 11 24H2 / Server 2025 introduced an SMB client feature...
CVE-2025-54918-POC
CVE-2025-54918 – Proof of Concept PoC ⚠️ Important Notice IMPORTANT: To test CVE-2025-54918 , you must create a DNS record in the target Active Directory environment. Always consult with the client and obtain explicit authorization before testing, as this can impact DNS and authentication behavior...
cupntlm-Automated-Exploit-For-CVE-2025-33073-
cupntlm CVE-2025-33073 — NTLM Reflection Bypass via DNS Coercion Automated exploitation tool for Active Directory environments. Overview cupntlm automates the NTLM reflection/relay attack chain that abuses CVE-2025-33073. It combines DNS record injection, forced authentication coercion PetitPotam...
CVE-2025-33073
CVE-2025-33073 — Windows SMB Client NTLM Reflection EoP Research writeup by Sentinel AI Defense. Defensive analysis only — no working exploit or PoC is published here. An improper access control flaw in the Windows SMB Client that revives NTLM reflection techniques thought to be mitigated — letti...
SMB-CVE-2025-33073
SMB-CVE-2025-33073 高级SMB蜜罐：CVE-2025-33073研究与实现 高级SMB蜜罐：CVE-2025-33073研究与取证 📌 项目概述 本项目展示了一个高交互蜜罐环境，旨在研究、检测和分析针对SMB（服务器消息块）协议的利用尝试。具体而言，该研究聚焦于CVE-2025-33073 ，探索NTLM反射与中继漏洞。 该系统部署在面向公网的VPS上，以模拟存在漏洞的企业文件服务器，吸引真实攻击者并实时捕获他们的技术手段。 🚀 主要特性 高交互SMB诱饵： 一个功能完整的基于Samba的服务器，专门配置为高价值目标。 动态蜜饵文件：...
CVE-2025-33073-checker
CVE-2025-33073 Checker Script This rough PoC checker script tests targets for CVE-2025-33073 vulnerability by attempting to perform NTLM reflection attacks using NTLM auth coercion via samba RPC, to do this you need to have account with access to the samba. Also you need to register a domain...
CVE-2025-33073
CVE-2025-33073 PoC Exploit for the NTLM reflection SMB flaw. All credits go to the offical research: https://www.synacktiv.com/publications/ntlm-reflection-is-dead-long-live-ntlm-reflection-an-in-depth-analysis-of-cve-2025 Prerequisites OS: Kali Linux has most packages pre-installed. NetExec NXC ...
Exploit for Improper Access Control in Microsoft
CVE-2025-33073 PoC Exploit for the NTLM reflection SMB flaw...
Microsoft Windows 10.0.17134.648 HTTP -> SMB NTLM Reflection Leads to Privilege Elevation Exploit
Exploit for windows platform in category local exploits Microsoft Windows 10.0.17134.648 - HTTP - SMB NTLM Reflection Leads to Privilege Elevation Exploit VULNERABILITY DETAILS It's possible to use the NTLM reflection attack to escape a browser sandbox in the case where the sandboxed process is...
Microsoft Windows 10.0.17134.648 - HTTP -> SMB NTLM Reflection Leads to Privilege Elevation
VULNERABILITY DETAILS It's possible to use the NTLM reflection attack to escape a browser sandbox in the case where the sandboxed process is allowed to create TCP sockets. In particular, I was able to combine the issues mentioned below with a bug in Chromium to escape its sandbox. HTTP - SMB NTLM...
Microsoft Exchange Server NTLM Reflection EWS User Impersonation Vulnerability
This vulnerability allows remote attackers to impersonate arbitrary users on vulnerable installations of Microsoft Exchange Server. Authentication is required to exploit this vulnerability. The specific flaw exists within the use of NTLM authentication in Exchange Server. NTLM responses produced ...
Microsoft Windows 8.1 - DCOM DCERPC Local NTLM Reflection Privilege Escalation (MS15-076)
Microsoft Windows 8.1 - DCOM DCERPC Local NTLM Reflection Privilege Escalation MS15-076 Source: https://github.com/monoxgas/Trebuchet Trebuchet MS15-076 CVE-2015-2370 Privilege Escalation Copies a file to any privileged location on disk Compiled with VS2015, precompiled exe in Binary directory...
Default Setting in Windows 7, 8.1 Could Allow Privilege Escalation
A default setting in both Windows 7 and 8.1 could allow local users to elevate privileges and in some situations, escape application sandboxes. The issue, something that leaves all current Windows client installations vulnerable, lies in the way the operating system handles authentication. In som...
SuSE 10 Security Update : XULRunner (ZYPP Patch Number 6734)
The Mozilla XULRunner engine was updated to version 1.9.0.16, fixing lots of bugs and various security issues. The following issues were fixed : - Crashes with evidence of memory corruption 1.9.0.16. MFSA 2009-65 / CVE-2009-3979 / CVE-2009-3981 - bmo487872 NTLM reflection vulnerability. MFSA...
SuSE 10 Security Update : Mozilla Firefox (ZYPP Patch Number 6735)
The Mozilla Firefox was updated to version 3.5.6, fixing lots of bugs and various security issues. The following issues were fixed : - Crashes with evidence of memory corruption rv:1.9.1.6. MFSA 2009-65 / CVE-2009-3979 / CVE-2009-3980 / CVE-2009-3982 - bmo504843,bmo523816 Memory safety fixes in...
SuSE9 Security Update : epiphany (YOU Patch Number 12616)
This update brings Mozilla SeaMonkey to 1.1.19 fixing various bugs and security issues. The following security issues are fixed : - Mozilla developers took fixes from previously fixed memory safety bugs in newer Mozilla-based products and ported them to the Mozilla 1.8.1 branch so they can be...
SeaMonkey < 1.1.19 Multiple Vulnerabilities
The installed version of SeaMonkey is earlier than 1.1.19. Such versions are potentially affected by the following security issues : - The columns of a XUL tree element can be manipulated in a particular way that would leave a pointer owned by the column pointing to freed memory. MFSA 2009-49 - A...