208 matches found
CVE-2026-4480-exploit-poc
الاستخدام: للدخول المجهول: python3 exploit.py --lhost --lport -t -N it is for anonymous login تسجيل الدخول عبر بيانات الاعتماد: python3 exploit.py --lhost --lport -t -u -p root@kitploit: ! Error: the following arguments are required: -s/--sharename Note: if user is anonymous and no password, then...
DumpSMBShare
سكربت بايثون لتفريغ الملفات والمجلدات عن بُعد من مشاركة SMB في Windows. الميزات قائمة المشاركات فقط مع --list-shares. اختيار الملفات ذات الامتدادات المحددة فقط مع --extensions أو جميع الملفات. اختيار المجلد المحلي للتفريغ إليه باستخدام --dump-dir. اختيار المجلد الأساسي للبحث فيه داخل المشاركة...
MANSPIDER
MANSPIDER SMB शेयर्स को रोचक जानकारी के लिए क्रॉल करें। फ़ाइल सामग्री खोज + regex समर्थित है! v2.0 में नया क्या है Manspider 2.0 आ गया है! इसके साथ महत्वपूर्ण सुधार आए हैं: नया और बेहतर टेक्स्ट निष्कर्षण Kreuzberg द्वारा संचालित - अब PDF, DOCX, XLSX, PPTX, OCR के साथ इमेज, और कई अन्य फ़ॉर्मेट का...
SMB_CVE-2025-24071
CVE-2025-24071 PoC طريقة الاستخراج عبر SMB + TAR هذا هو إثبات مفهوم PoC لاستغلال CVE-2025-24071 ، وهي ثغرة أمنية في Windows تسمح بتسريب تجزئات NTLM عبر ملفات .library-ms. يختلف هذا الإصدار قليلاً عن الإصدارات الأخرى باستخدام أرشيف .tar بدلاً من .zip، مما يحسّن التوافق في البيئات التي تعتمد على SM...
CVE-2023-23397
CVE-2023-23397 취약점 상세 정보 🚨💻 Microsoft는 최근 이 제로데이 익스플로잇을 포함한 일련의 중요한 보안 취약점을 해결했습니다: CVE-2023-23397. CVSSCommon Vulnerability Scoring System는 이 익스플로잇에 9.8점을 부여했습니다. CVE-2023-23397: Microsoft Outlook의 권한 상승 📧🔓 Microsoft Outlook에서 중요한 권한 상승EoP 취약점이 확인되었습니다. 이 결함은 공격자가 악성 메시지에 UNCUniversal Naming...
CVE-2024-38077
CVE-2024-38077-EXP Code corrigé basé sur pseudo-code. Domaine de validité EXP : Windows Server 2025 POC : 08-25 Utilisation root@kitploit: options: -h, --help show this help message and exit --targetip TARGETIP Target IP, eg: 192.168.120.1 --evilip EVILIP Evil IP, eg: 192.168.120.2 --evildllpath...
cdt-vulnsamba-deploy
CDT Team Delta - असुरक्षित Samba परिनियोजन परिचय यह रिपॉजिटरी CVE-2017-7494 से प्रभावित एक असुरक्षित Samba फ़ाइल सर्वर की Ansible-आधारित परिनियोजन है, जो एक गंभीर रिमोट कोड निष्पादन भेद्यता है। उम्मीद है कि इसे ग्रे टीम चरण के दौरान टीम डेल्टा के लिए तैनात किया जाएगा। भेद्यता विवरण CVE-2017-7494,...
lnkbomb
Lnkbomb Lnkbomb का उपयोग असुरक्षित फ़ाइल शेयरों में दुर्भावनापूर्ण शॉर्टकट फ़ाइलें अपलोड करने के लिए किया जाता है। यह कमज़ोरी इसलिए मौजूद है क्योंकि Windows शॉर्टकट फ़ाइल से संबद्ध करने के लिए एक आइकन फ़ाइल की तलाश करता है। इस आइकन फ़ाइल को पेनिट्रेशन टेस्टर की मशीन पर चल रहे Responder या smbserv...
CVE-2026-41065
Tautulli is a Python based monitoring and tracking tool for Plex Media Server. Versions prior to 2.17.1 are vulnerable to remote code execution via the newsletter custom template directory feature. On a fresh install before the setup wizard is completed, all management endpoints are completely...
CLSA-2026-1779357606 curl: Fix of CVE-2026-5773
CVE-2026-5773: disable connection reuse for SMBS to prevent libcurl from reusing a connection to the same server for a different SMB share...
EUVD-2026-15107
A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4. Mounting a maliciously crafted SMB network share may lead to system termination...
CVE-2026-28835
A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4. Mounting a maliciously crafted SMB network share may lead to system termination...
CVE-2026-28835
A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4. Mounting a maliciously crafted SMB network share may lead to system termination...
CVE-2026-28835
A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4. Mounting a maliciously crafted SMB network share may lead to system termination...
📄 Mobile Mouse 3.6.0.4 Remote Code Execution
Mobile Mouse version 3.6.0.4 remote code execution proof of concept exploit written in php that takes advantage of an older flaw from 2022. ============================================================================================================================================= | Title : Mobil...
CVE-2020-24772
In Dreamacro Clash for Windows v0.11.4, an attacker could embed a malicious iframe in a website with a crafted URL that would launch the Clash Windows client and force it to open a remote SMB share. Windows will perform NTLM authentication when opening the SMB share and that request can be relaye...
CVE-1999-0520
A system-critical NETBIOS/SMB share has inappropriate access control...
CVE-1999-0518
A NETBIOS/SMB share password is guessable...
.NET SOAPwn Flaw Opens Door for File Writes and Remote Code Execution via Rogue WSDL
New research has uncovered exploitation primitives in the .NET Framework that could be leveraged against enterprise-grade applications to achieve remote code execution. WatchTowr Labs, which has codenamed the "invalid cast vulnerability" SOAPwn , said the issue impacts Barracuda Service Center RM...