eaphammer

by Gabriel Ryan s0lst1c3 Current release: v1.14.1 Supports Python 3.9+. Overview EAPHammer is a toolkit for performing targeted evil twin attacks against WPA2-Enterprise networks. It is designed to be used in full scope wireless assessments and red team engagements. As such, focus is placed on...

rpcfirewall

I Need More Information Check out our RPC Firewall blog post or our BlackHat talk to gain better understanding of RPC, RPC attacks, and the solution: RPC Firewall. Join our |Zero| Labs Slack Community workspace for any questions, issues, or simply to shout out. We would love to hear from you also...

ms-photos_NTLM_Leak

Microsoft ms-photos URI NTLM 누출 브라우저에서 한 번의 클릭으로 NTLM 해시를 유출할 수 있는 새로운 취약점 작성자: Ruben Enkaoua 설명 Microsoft ms-photos URI 체계는 fileName을 매개변수로 사용하며, 여기에 UNC 경로를 제출할 수 있어 한 번 열리면 NTLMv2-SSP 해시가 유출됩니다. 특수하게 조작된 링크를 만들어 공격자는 피해자가 브라우저에서 직접 Microsoft Photos 앱을 실행하도록 유도할 수 있습니다. 이 동작이 트리거되면 피해자의...

CLSIDFinder

CLSIDFinder Invoke-CLSIDFinder는 Windows 레지스트리에서 CLSID 및 AppID 항목을 열거하여 LocalService 값을 통해 Windows 서비스와 연결된 COM 개체를 식별합니다. 이 함수는 이러한 항목을 상호 참조하고, 결과를 CSV 파일로 내보내며, 관련 서비스가 실행 중일 때 COM 활성화를 시도합니다. 주로 릴레이 공격 및 기타 LPE 시나리오에서 사용 가능한 CLSID를 식별하는 데 도움을 주기 위해 설계되었습니다. 사용법 PS C:\Users\Administrator\Deskto...

CVE-2026-0522 Local File Inclusion in the File Upload/Download Process

A local file inclusion vulnerability in the upload/download flow of the VertiGIS FM application allows authenticated attackers to read arbitrary files from the server by manipulating a file's path during its upload. When the file is subsequently downloaded, the file in the attacker controlled pat...

VertiGIS FM 安全漏洞

VertiGIS FM is a facility and asset management platform from VertiGIS Corporation. Version 10.5.00119 of VertiGIS FM contains a security vulnerability. This vulnerability stems from the inclusion of local files during the upload/download process. It could allow authenticated attackers to read any...

Cocos AI 访问控制错误漏洞

Cocos AI is an AI security computing platform based on a trusted execution environment, open-sourced by Ultraviolet. Cocos AI versions 0.8.2 and earlier contain an access control vulnerability. This vulnerability stems from a proven TLS design that has weaknesses in relay attacks, allowing...

Windows File Explorer NTLM Forced Authentication Hash Disclosure 1.0

Windows File Explorer contains persistent forced authentication behavior that automatically transmits NTLM challenge-response hashes to remote SMB/WebDAV endpoints during routine file operations, enabling credential theft and potential domain compromise through NTLM relay attacks. This is not an...

Microsoft Windows 11 24H2 NTLM Relay Orchestrator Privilege Escalation

This Metasploit module checks the SMB Signing status on remote targets. If signing is not required, the target is vulnerable to NTLM Relay attacks. It serves as an automated pre-flight check for relay operations...

SmarterTools SmarterMail security vulnerability

SmarterTools SmarterMail is a set of email server software developed by SmarterTools Corporation. This software supports features such as spam filtering, data statistics, and Simple Mail Transfer Protocol SMTP authentication. Previous versions of SmarterTools SmarterMail, including version 9518,...

EUVD-2025-203407

An issue was discovered in Dynatrace OneAgent before 1.325.47. When attempting to access a remote network share from a machine where OneAgent is installed and receiving a "STATUSLOGONFAILURE" error, the agent will retrieve every user token on the machine and repeatedly attempt to access the netwo...

Old tech, new vulnerabilities: NTLM abuse, ongoing exploitation in 2025

Just like the 2000s Flip phones grew popular, Windows XP debuted on personal computers, Apple introduced the iPod, peer-to-peer file sharing via torrents was taking off, and MSN Messenger dominated online chat. That was the tech scene in 2001, the same year when Sir Dystic of Cult of the Dead Cow...

EUVD-2019-18936

Malware in sbrugna...

EUVD-2016-6117

Malware in sbrugna...

EUVD-2010-2357

Malware in sbrugna...

EUVD-2015-4903

Malware in sbrugna...

EUVD-2015-4866

Malware in sbrugna...

EUVD-2025-27294

Malicious code in bioql PyPI...

EUVD-2022-0662

Malicious code in bioql PyPI...

PrivExchange

This is a proof-of-concept PoC tool for abusing Microsoft Exchange to obtain Domain Admin privileges. The tool, named PrivExchange, requires the Impacket library and can be used to subscribe to push notifications on Exchange Web Services, which will make Exchange connect back to the attacker and...