Snaffler

Snaffler À quoi ça sert ? Snaffler est un outil pour les pentesters et les red teamers afin de vous aider à trouver de délicieuses aiguilles de bonbons surtout des creds, mais c'est flexible dans un tas de meules de foin horribles et ennuyeuses un environnement massif Windows/AD. Il pourrait...

SMBCrunch

SMBCrunch L'une des tâches les plus chronophages pour un red teamer est de fouiller dans les systèmes de fichiers et les partages, en essayant d'identifier toute information potentiellement sensible. SMBCrunch permet à un red teamer d'identifier rapidement les partages de fichiers Windows dans un...

SharpShares

SharpShares Assembly C .NET multithreadé pour énumérer les partages réseau accessibles dans un domaine Basé sur le projet SharpShares de djhohnstein .\SharpShares.exe help Usage: SharpShares.exe /threads:50 /ldap:servers /ou:"OU=Special Servers,DC=example,DC=local"...

CredCrack

CredCrack ⛔ DÉPRÉCIÉ. Ce dépôt n'est plus maintenu. Veuillez plutôt utiliser CrackMapExec. Introduction CredCrack est un moissonneur d'identifiants rapide et furtif. Il exfiltre les identifiants de manière récursive en mémoire et en clair. Une fois terminé, CredCrack analyse et affiche les...

WinShareEnum

WinShareEnum Перечислитель общих ресурсов Windows скачать https://github.com/nccgroup/WinShareEnum/raw/master/Info/WinShareEnum.exe запуск против диапазона в моей локальной не доменной сети, с несколькими тестовыми общими папками. Помните, что он в первую очередь предназначен для доменных / больш...

EUVD-2026-68465

DataEase before 2.10.26 contains multiple access control defects in the sharing link module. Tickets are not bound to the target share UUID, so a valid ticket issued for one share can be reused against another ShareTicketManage.validateTicket / POST /de2api/share/proxyInfo. The POST...

TaskHound - Windows Privileged Scheduled Task Discovery Tool

TaskHound is a tool that hunts for Windows scheduled tasks that run with privileged accounts and stored credentials. It enumerates tasks over SMB, parses XMLs, and identifies high-value attack opportunities through BloodHound support...

Nextcloud: Nextcloud Tables v1 Share Enumeration Without Authorization (Regression of CVE-2024-52507)

A vulnerability was discovered in Nextcloud Tables v1 that allowed unauthorized users to enumerate shares. The vulnerability was a regression of a previously addressed issue, CVE-2024-52507...

Security fix for the ALT Linux 10 package samba version 4.16.9-alt1

4.16.9-alt1 built March 2, 2023 Evgeny Sinelnikov in task 315490 Feb. 20, 2023 Evgeny Sinelnikov - Update to maintenance release of Samba 4.16 - Security fixes: + CVE-2022-38023: Samba should refuse RC4 aka md5 based SChannel on NETLOGON Samba15240. - Major fixes: + smbcgetxattr return value is...

SMBMap - Samba Share Enumeration Tool

SMBMap allows users to enumerate samba share drives across an entire domain. List share drives, drive permissions, share contents, upload/download functionality, file name auto-download pattern matching, and even execute remote commands. This tool was designed with pen testing in mind, and is...

SMB Share Enumeration

This module determines what shares are provided by the SMB service and which ones are readable/writable. It also collects additional information such as share types, directories, files, time stamps, etc. By default, a RubySMB netshareenumall request is done in order to retrieve share information,...

Cisco ASA CIFS Share Enumeration Denial of Service Vulnerability

A vulnerability in the WebVPN Common Internet File System CIFS access function of Cisco Adaptive Security Appliance ASA could allow an authenticated, remote attacker to trigger a reload of the affected device. The vulnerability is due to missing bounds checks on the response received from the CIF...

Nmap NSE net: smb-enum-shares

Attempts to list shares using the 'srvsvc.NetShareEnumAll' MSRPC function and retrieve more information about them using 'srvsvc.NetShareGetInfo'. If access to those functions is denied, a list of common share names are checked. Finding open shares is useful to a penetration tester because there...

CVE-2010-1830

AFP Server in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 generates different error messages depending on whether a share exists, which allows remote attackers to enumerate valid share names via unspecified vectors...

CVE-2010-1830: Undefined Security Weakness

AFP Server in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 generates different error messages depending on whether a share exists, which allows remote attackers to enumerate valid share names via unspecified vectors...

smb-enum-shares NSE Script

Attempts to list shares using the srvsvc.NetShareEnumAll MSRPC function and retrieve more information about them using srvsvc.NetShareGetInfo. If access to those functions is denied, a list of common share names are checked. Finding open shares is useful to a penetration tester because there may ...