Project-NTLM-Hash-Capture-and-Phishing-Email-Exploitation-for-CVE-2024-21413

Project Goal: 이 프로젝트는 네트워크 상의 사용자로부터 NTLM 해시를 캡처하고 이메일을 사용한 피싱 공격을 실행하기 위한 다양한 도구의 사용을 시연하기 위해 만들어졌습니다. 이를 통해 네트워크 인증 취약점과 피싱 방법이 어떻게 시스템을 손상시키기 위해 악용될 수 있는지 보여줍니다. Process Description 1. Responder를 사용한 NTLM 해시 캡처 처음에는 Responder 도구를 사용하여 네트워크를 통해 인증 해시를 캡처했습니다. Responder는 LLMNR, NBT-NS, MDNS와 같은...

Exploit for Improper Input Validation in Microsoft

monikerlinktest cve-2024-21413 1. set up tun0 on router via o...

Exploit for Improper Input Validation in Microsoft

Laboratório SMB + Responder CVE-2024-21413https://vulners...

SMBInvader

SMBInvader This script automates the...

Nac_Bypass_Agent - This Function Combines All The Above Functions And Takes Necessary Information From The User To Change The IP And MAC Address, Start The Responder And Tcpdump Tools, And Run The Nbtscan Tool

Nac Bypass Agent This piece of code is a script written in Python and designed to run on Kali Linux. Here is a summary explaining what each function does: runcommandcommand: This function runs the command it takes as input and returns its output. killnetworkservices: This function stops the...

Open redirect

In Dreamacro Clash for Windows v0.11.4, an attacker could embed a malicious iframe in a website with a crafted URL that would launch the Clash Windows client and force it to open a remote SMB share. Windows will perform NTLM authentication when opening the SMB share and that request can be relaye...

Combining Responder and PsExec for Internal Penetration Tests

By Emilie St-Pierre, TJ Byrom, and Eric Sun Ask any pen tester what their top five penetration testing tools are for internal engagements, and you will likely get a reply containing nmap, Metasploit, CrackMapExec, SMBRelay and Responder. An essential tool for any whitehat, Responder is a Python...