SMB-CVE-2025-33073

SMB-CVE-2025-33073 高级SMB蜜罐：CVE-2025-33073研究与实现 高级SMB蜜罐：CVE-2025-33073研究与取证 📌 项目概述 本项目展示了一个高交互蜜罐环境，旨在研究、检测和分析针对SMB（服务器消息块）协议的利用尝试。具体而言，该研究聚焦于CVE-2025-33073 ，探索NTLM反射与中继漏洞。 该系统部署在面向公网的VPS上，以模拟存在漏洞的企业文件服务器，吸引真实攻击者并实时捕获他们的技术手段。 🚀 主要特性 高交互SMB诱饵： 一个功能完整的基于Samba的服务器，专门配置为高价值目标。 动态蜜饵文件：...

CVE-2025-33073-checker

Script de verificación CVE-2025-33073 Este script de verificación PoC aproximado prueba objetivos para la vulnerabilidad CVE-2025-33073 al intentar realizar ataques de reflexión NTLM mediante la coerción de autenticación NTLM a través de samba RPC; para ello, necesitas tener una cuenta con acceso...

windows-smb-vulnerability-framework-cve-2025-33073

Marco de Investigación de Vulnerabilidades del Cliente SMB de Windows Autor: cyberseallll Creado: 2025 Descripción General Desarrollé este marco de investigación para analizar y comprender CVE-2025-33073, una vulnerabilidad crítica de Elevación de Privilegios en el Cliente SMB de Windows. Esta...

cupntlm-Automated-Exploit-For-CVE-2025-33073-

cupntlm CVE-2025-33073 — 通过 DNS 强制认证绕过 NTLM 反射 用于 Active Directory 环境的自动化利用工具。 概述 cupntlm 自动化了利用 CVE-2025-33073 的 NTLM 反射/中继攻击链。它将 DNS 记录注入、强制身份认证（PetitPotam）和 NTLM 中继整合到单个工作流中。该工具支持两种运行模式，具体取决于范围与隐蔽性要求。 攻击链概要 root@kitploit: Attacker Domain Controller Target Host │ │ │ │── 1. Inject DNS record...

📄 Windows SMB Client Privilege Escalation

This Metasploit module exploits CVE-2025-33073 in Windows SMB clients through a complex attack chain involving DNS record injection, NTLM relay attacks, and RPC coercion. The vulnerability allows privilege escalation and remote code execution on affected Windows systems including Windows 11,...

About Elevation of Privilege – Windows SMB Client (CVE-2025-33073) vulnerability

About Elevation of Privilege - Windows SMB Client CVE-2025-33073 vulnerability. A vulnerability from the June Microsoft Patch Tuesday allows an attacker to execute a malicious script, forcing the victim's host to connect to the attacker's SMB server and authenticate, resulting in gaining SYSTEM...

Exploit for Improper Access Control in Microsoft

CVE-2025-33073 PoC Exploit for the NTLM reflection SMB flaw...

CVE-2025-33073

CVE-2025-33073 is a network-accessible elevation of privilege in the Windows SMB Client caused by improper access control in the SMB protocol stack. The initial description confirms privilege escalation with network access. Connected documents provide concrete exploit presence: PoCs and proof‑of‑...

CVE-2025-33073 Windows SMB Client Elevation of Privilege Vulnerability

...

CVE-2025-33073 Windows SMB Client Elevation of Privilege Vulnerability

...

CVE-2025-33073

creationtimestamp| type| source ---|---|--- 2025-06-10 13:15:01+00:00| seen| https://bsky.app/profile/redteam-pentesting.de/post/3lraxxvj4ns2j 2025-06-10 13:15:02+00:00| seen| https://bsky.app/profile/redteam-pentesting.de/post/3lraxxvjaks2j 2025-06-10 15:24:53+00:00| seen|...