smbeagle

root@kitploit: / \ / // / / / // / / / / / ///\ / / / / / / / / / / / / / / // / / / / , / / / // // / / / / // // / // ,// ///||////,// ///, / PRESENTS // SMBeagle SMBeagle is a cross-platform SMB fileshare auditing tool that hunts out all files it can see in the network and reports if...

ActiveReign

ActiveReign ⚠️ Thank you for your support. This project is no longer publicly maintained. Background A while back I was challenged to write a discovery tool with Python3 that could automate the process of finding sensitive information on network file shares. After writing the entire tool with...

SambaHunter

SambaHunter It is a simple script to exploit RCE for Samba CVE-2017-7494. Now works with Python3. Many of the required Python2 libraries are deprecated e.g. commands Added logging to show which shares are writeable. If 'Exploit Finished' appears but no shares are writeable, the exploit didn't wor...

PowerHuntShares

PowerHuntShares v2 PowerHuntShares is PowerShell tool designed to help cybersecurity teams and penetration testers better identify, understand, attack, and remediate SMB shares in the Active Directory environments they protect. Every hacker has a story about abusing SMB shares, but it’s an attack...

SMBCrunch

SMBCrunch One of the most time consuming tasks as a red teamer is diving into filesystems and shares, attempting to identify any potentially sensitive information. SMBCrunch allows a red teamer to quickly identify Windows File Shares in a network, performs a recursive directory listing of the...

avml

AVML Acquire Volatile Memory for Linux Summary A portable volatile memory acquisition tool for Linux. AVML is an X8664 userland volatile memory acquisition tool written in Rust, intended to be deployed as a static binary. AVML can be used to acquire memory without knowing the target OS distributi...

enum_shares

enumshares Herramienta de enumeración de carpetas compartidas EnumShares enumera carpetas compartidas a través de la red y bajo una cuenta de usuario personalizada. Puede comprobar si la carpeta compartida es escribible para el usuario actual. Puede ahorrarte mucho tiempo cuando necesitas descubr...

ShareHound

ShareHound: Mapping rights of network shares using BloodHound OpenGraph A tool to map the access rights of network shares into BloodHound OpenGraphs. Read the associated blog post: https://specterops.io/blog/2025/10/30/sharehound-an-opengraph-collector-for-network-shares/ Two implementations This...

CMLoot

CMLoot CMLoot was created to easily find interesting files stored on System Center Configuration Manager SCCM/CM SMB shares. The shares are used for distributing software to Windows clients in Windows enterprise environments and can contains scripts/configuration files with passwords, certificate...

sharesniffer

sharesniffer sharesniffer is a network analysis tool for finding open and closed file shares on your local network. It includes auto-network discovery and auto-mounting of any open cifs and nfs shares. How to use Example to find all hosts on any local network with open/closed nfs/smb shares:...

sharesniffer

sharesniffer sharesniffer 是一个网络分析工具，用于查找本地网络上的开放和关闭的文件共享。它包含自动网络发现和自动挂载任何开放的 CIFS 和 NFS 共享。 使用方法 示例：查找任何本地网络上具有开放/关闭 NFS/SMB 共享的所有主机： root@kitploit: python sharesniffer.py 示例：查找 192.168.56.0/24 网络中的所有主机，排除可能的路由器/防火墙，并自动挂载任何开放的 NFS/SMB 共享到 /mnt： root@kitploit: python sharesniffer.py -l 4 --hosts...

smbclient-ng

smbclient-ng, una forma rápida y fácil de usar para interactuar con recursos compartidos SMB. !NOTE ¡Echa un vistazo al nuevo smbclient-ng escrito en Go, más rápido y multiplataforma por defecto! https://github.com/TheManticoreProject/smbclient-ng Características acls: Lista las ACL de archivos y...

sift

Sift Secrets Triaje de exposición de credenciales y datos sensibles para recursos compartidos de archivos. Cuando aparece un recurso compartido abierto, la pregunta nunca es "¿este repositorio tiene una clave filtrada". Es "¿qué se ha expuesto y qué tengo que rotar antes del cierre del día?" sift...

WinShareEnum

WinShareEnum Enumerador de recursos compartidos de Windows descarga https://github.com/nccgroup/WinShareEnum/raw/master/Info/WinShareEnum.exe ejecutándose contra un rango en mi red local sin dominio, con algunos recursos compartidos de prueba. Recuerde que está diseñado principalmente para redes...

iberyanbytes

Iberyanbytes AD enumeration tool, which allows taking information that is related to the network and gathering information about network interfaces, IP configuration, DNS, and routing tables. It enumerates network shares and analyses share permissions, gathers details about installed software,...

CVE-2026-82236

File Browser versions from 2.63.6 through 2.63.23 fail to clean up public share links when a privileged user deletes another user's shared file. Attackers can access the surviving share link to retrieve new unrelated content uploaded to the same path without authentication...

CVE-2026-54206 TeamDavid: Server-Side Request Forgery (SSRF) via 'pathname' parameter in sending functionality

Tobit Laboratories AG TeamDavid's Webbox 's sending email, fax, SMS, etc. functionality accepts a @@INCLUDE command, which can be set to network locations using UNC paths e.g., “\Server\Share”. The server processes these paths without validation, resulting in outbound connection attempts to...

CVE-2026-54204 TeamDavid: Server-Side Request Forgery (SSRF) via 'pathnameroot' parameter in search functionality

Tobit Laboratories AG TeamDavid's Webbox 's search functionality accepts a “pathnameroot” parameter, which can be set to network locations using UNC paths e.g., “\Server\Share”. The server processes these paths without validation, resulting in outbound connection attempts to attacker-controlled...

CVE-2026-48063

Baileys is a cocket-based TS/JavaScript API for WhatsApp Web. In versions prior to both 6.7.22 and 7.0.0-rc12, any Baileys session can be sent a malicious payload via the placeholderResendMessage and trigger a fake messages.upsert event with a fake message key and payload. This allows anyone to...

CVE-2026-48063 Baileys has message upsert / hist sync spoofing and app state corruption when using maliciously crafted protocolMessage payload

Baileys is a cocket-based TS/JavaScript API for WhatsApp Web. In versions prior to both 6.7.22 and 7.0.0-rc12, any Baileys session can be sent a malicious payload via the placeholderResendMessage and trigger a fake messages.upsert event with a fake message key and payload. This allows anyone to...