90 matches found
smbeagle
/ \ / // / / / // / / / / / ///\ / / / / / / / / / / / / / / // / / / / , / / / // // / / / / // // / // ,// ///||////,// ///, / PRESENTS // SMBeagle...
ShareHound
ShareHound：使用 BloodHound OpenGraph 映射网络共享权限 一个将网络共享的访问权限映射到 BloodHound OpenGraph 的工具。 阅读相关博客文章：https://specterops.io/blog/2025/10/30/sharehound-an-opengraph-collector-for-network-shares/ 两种实现 本仓库包含 ShareHound 的两种实现。它们的目标相同——根据 SMB 共享权限生成 BloodHound OpenGraph JSON——但在语言、运行时和功能集上有所不同。选择最适合你工作流程的一种。...
enum_shares
enumshares 共享文件夹枚举工具 EnumShares 通过指定用户账户跨网络枚举共享文件夹。它可以检查当前用户是否对共享文件夹拥有写入权限。当您需要发现允许“写入”到所有人或特定用户（组成员）的目录时，它可以为您节省大量时间。 语法如下： enumshares.py -t 10.10.10.0/24 -u mydomain\myuser -p Password -w -o logfile.txt or enumshares.py -t 10.10.10.222 -u someuser -p somepass -n threads default:100 or any...
iberyanbytes
Iberyanbytes AD列挙ツール。ネットワークに関連する情報を取得し、ネットワークインターフェース、IP設定、DNS、ルーティングテーブルに関する情報を収集できます。ネットワーク共有を列挙して共有権限を分析し、インストール済みソフトウェア、レジストリソフトウェア、システム構成、インストール済みサービスの詳細を収集します。また、ローカルユーザーやユーザーセッションに関する情報も取得可能です。ドメインコントローラー、サイト、信頼関係、ドメインユーザー、グループ、グループポリシーに関する情報を取得します。SAMやSYSTEMなどのパスワード関連ファイルを検索します。...
CVE-2026-98126
A flaw was found in the Linux kernel's SMB client. This flaw allows a local user to bypass enforced file-size restrictions and expand files beyond authorized limits. When handling file allocation operations that zero out a range of data without preserving the file's existing size, the kernel fail...
CVE-2026-54206 TeamDavid: Server-Side Request Forgery (SSRF) via 'pathname' parameter in sending functionality
Tobit Laboratories AG TeamDavid's Webbox 's sending email, fax, SMS, etc. functionality accepts a @@INCLUDE command, which can be set to network locations using UNC paths e.g., “\Server\Share”. The server processes these paths without validation, resulting in outbound connection attempts to...
CVE-2026-54204 TeamDavid: Server-Side Request Forgery (SSRF) via 'pathnameroot' parameter in search functionality
Tobit Laboratories AG TeamDavid's Webbox 's search functionality accepts a “pathnameroot” parameter, which can be set to network locations using UNC paths e.g., “\Server\Share”. The server processes these paths without validation, resulting in outbound connection attempts to attacker-controlled...
kernel: Linux kernel: smb: client: reject userspace cifs.spnego descriptions
A privilege escalation vulnerability was found in the Linux kernel's CIFS client implementation. This could allow a local attacker to impersonate other users, bypass authentication in SMB mount operations, and potentially gain unauthorized access to network file shares or escalate privileges...
kernel: Linux kernel: smb: client: reject userspace cifs.spnego descriptions
A privilege escalation vulnerability was found in the Linux kernel's CIFS client implementation. This could allow a local attacker to impersonate other users, bypass authentication in SMB mount operations, and potentially gain unauthorized access to network file shares or escalate privileges...
kernel: Linux kernel: smb: client: reject userspace cifs.spnego descriptions
A privilege escalation vulnerability was found in the Linux kernel's CIFS client implementation. This could allow a local attacker to impersonate other users, bypass authentication in SMB mount operations, and potentially gain unauthorized access to network file shares or escalate privileges...
kernel: Linux kernel: smb: client: reject userspace cifs.spnego descriptions
A privilege escalation vulnerability was found in the Linux kernel's CIFS client implementation. This could allow a local attacker to impersonate other users, bypass authentication in SMB mount operations, and potentially gain unauthorized access to network file shares or escalate privileges...
kernel: Linux kernel: smb: client: reject userspace cifs.spnego descriptions
A privilege escalation vulnerability was found in the Linux kernel's CIFS client implementation. This could allow a local attacker to impersonate other users, bypass authentication in SMB mount operations, and potentially gain unauthorized access to network file shares or escalate privileges...
kernel: Linux kernel: smb: client: reject userspace cifs.spnego descriptions
A privilege escalation vulnerability was found in the Linux kernel's CIFS client implementation. This could allow a local attacker to impersonate other users, bypass authentication in SMB mount operations, and potentially gain unauthorized access to network file shares or escalate privileges...
kernel: Linux kernel: smb: client: reject userspace cifs.spnego descriptions
A privilege escalation vulnerability was found in the Linux kernel's CIFS client implementation. This could allow a local attacker to impersonate other users, bypass authentication in SMB mount operations, and potentially gain unauthorized access to network file shares or escalate privileges...
kernel: Linux kernel: smb: client: reject userspace cifs.spnego descriptions
A privilege escalation vulnerability was found in the Linux kernel's CIFS client implementation. This could allow a local attacker to impersonate other users, bypass authentication in SMB mount operations, and potentially gain unauthorized access to network file shares or escalate privileges...
kernel: Linux kernel: smb: client: reject userspace cifs.spnego descriptions
A privilege escalation vulnerability was found in the Linux kernel's CIFS client implementation. This could allow a local attacker to impersonate other users, bypass authentication in SMB mount operations, and potentially gain unauthorized access to network file shares or escalate privileges...
CVE-2026-46243
A privilege escalation vulnerability was found in the Linux kernel's CIFS client implementation. This could allow a local attacker to impersonate other users, bypass authentication in SMB mount operations, and potentially gain unauthorized access to network file shares or escalate privileges...
GHSA-FWF6-J56G-M97C Electerm has an unvalidated shell.openExternal that allows arbitrary protocol execution via terminal link click
Impact Electerm's terminal hyperlink handler passes any URL clicked in the terminal directly to shell.openExternal without any protocol validation. When a user connects to a malicious SSH server, the attacker can print a crafted URI in the terminal output. If the victim clicks the link,...
CVE-2024-39847
Unauthenticated attackers can exploit a weakness in the XML parser functionality of the SOAP endpoints in 4D server. This allows them to obtain read access to files on the application server and adjacent network shares, and perform HTTP GET requests to arbitrary services...
[SECURITY] Fedora 44 Update: smb4k-4.0.6-1.fc44
Smb4K is an SMB/CIFS share browser for KDE. It uses the Samba software suite to access the SMB/CIFS shares of the local network neighborhood. Its purpose is to provide a program that's easy to use and has as many features as possible...