Firework

⚠️ NOTA: Questo strumento non è più in manutenzione attiva. Firework Firework è uno strumento proof of concept per interagire con Microsoft Workplaces creando file validi richiesti per il processo di provisioning. Lo strumento include anche del codice di Responder per sfruttare la sua capacità di...

cve-2023-23397

CVE-2023-23397 Este script permite criar e-mails do Outlook codificados em TNEF com o payload de exploração do CVE-2023-23397 e enviá-los via SMTP puro - sem necessidade de objetos COM ou EWS. Não consegui fazer com que a classe de mensagem IPM.Schedule.Meeting.Request funcionasse corretamente el...

Responder

Responder Responder è un poisoner LLMNR, NBT-NS e MDNS con server di autenticazione rogue integrati per HTTP, SMB, MSSQL, FTP, LDAP, Kerberos, DNS e altro. Supporta NTLMv1/NTLMv2/LMv2, NTLMSSP esteso e vari metodi di autenticazione su oltre 15 protocolli. Indice Panoramica Novità Installazione...

Internal-Monologue

Ataque Monólogo Interno: Recuperando Hashes NTLM sem Tocar no LSASS Introdução Mimikatz, desenvolvido por Benjamin Delpy @gentilkiwi, é uma ferramenta de pós-exploração bem conceituada, que permite que adversários extraiam senhas em texto claro, hashes NTLM e tickets Kerberos da memória, bem como...

lsarelayx

lsarelayx Introduzione lsarelayx è uno strumento di relay NTLM di sistema progettato per inoltrare le richieste di autenticazione NTLM in arrivo all'host su cui è in esecuzione. lsarelayx inoltra qualsiasi richiesta di autenticazione in arrivo, inclusa SMB. Poiché lsarelayx si aggancia ai flussi ...

evil-ssdp

Panoramica Questo strumento risponde alle richieste di discovery multicast SSDP, presentandosi come un dispositivo UPNP generico. Il tuo dispositivo falsificato apparirà magicamente in Esplora File Windows sulle macchine nella tua rete locale. Agli utenti tentati di aprire il dispositivo viene...

Farmer

Farmer लेखक: @domchell अवलोकन मैं एक किसान बनना चाहता था, इसलिए मैंने हैश की फसल काटनी शुरू कर दी Farmer एक विंडोज डोमेन में NetNTLM हैश एकत्र करने की एक परियोजना है। Farmer यह एक स्थानीय WebDAV सर्वर बनाकर प्राप्त करता है जो किसी भी कनेक्ट करने वाले क्लाइंट से WebDAV Mini Redirector को प्रमाणित...

CVE-2023-23397-PoW

CVE-2023-23397-PoW Prova di lavoro di CVE-2023-23397 per l'applicazione client Microsoft Outlook vulnerabile. Solo per scopi educativi e di ricerca. Anteprima di CVE-2023-23397 Questa CVE mira a recuperare l'hash NetNTLM dell'utente autenticato dal client Microsoft Outlook versione 2016, ad...

evil-ssdp

Overview This tool responds to SSDP multicast discover requests, posing as a generic UPNP device. Your spoofed device will magically appear in Windows Explorer on machines in your local network. Users who are tempted to open the device are shown a configurable phishing page. This page can load a...

LeakedWallpaper

Leaked Wallpaper Dies ist ein Tool zur Privilege-Escalation behoben mit CVE-2024-38100 in KB5040434, mit dem wir den NetNTLM-Hash eines Benutzers aus jeder Sitzung auf dem Computer leaken können, selbst wenn wir als Benutzer mit geringen Privilegien arbeiten. Verwendung root@kitploit:...

EUVD-2016-6117

Malware in sbrugna...

EUVD-2021-16051

Malware in sbrugna...

CVE-2021-29416

An issue was discovered in PortSwigger Burp Suite before 2021.2. During viewing of a malicious request, it can be manipulated into issuing a request that does not respect its upstream proxy configuration. This could leak NetNTLM hashes on Windows systems that fail to block outbound SMB...

Microsoft Word UNC Path Injector

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework Gems for extracting files require 'zip' Project for creating files require 'rex/zip' class MetasploitModule 'Microsoft Word UNC Path Injector', 'Description' = %q This...

BADPDF Malicious PDF Creator

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'BADPDF Malicious PDF Creator', 'Description' = ' This module can either creates a blank PDF file which contains a UNC link which can be used to...

Exploit for Improper Input Validation in Microsoft

CVE-2023-23397-PoW Proof of Work of CVE-2023-23397 for vulnera...

Metasploit Weekly Wrap-Up 02/16/2024

New Fetch Payload It has been almost a year since Metasploit released the new fetch payloads and since then, 43 of the 79 exploit modules have had support for fetch payloads. The original payloads supported transferring the second stage over HTTP, HTTPS and FTP. This week, Metasploit has expanded...

OPSEC failures when threat hunting

Over the last few years I’ve carried out a lot of phishing, and have some interesting observations on how organisations respond. However, the purpose of this blog is to highlight a worrying and amusing trend in response actions taken by the blue team and researchers when threat hunting a phishing...

SUSE CVE-2016-5166

The download implementation in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux does not properly restrict saving a file:// URL that is referenced by an http:// URL, which makes it easier for user-assisted remote attackers to discover NetNTLM hashes and condu...

Lsarelayx - NTLM Relaying For Windows Made Easy

lsarelayx is system wide NTLM relay tool designed to relay incoming NTLM based authentication to the host it is running on. lsarelayx will relay any incoming authentication request which includes SMB. Since lsarelayx hooks into existing application authentication flows, the tool will also attempt...