469 matches found
ntfstool
ntfstool NTFSTool is a forensic tool focused on NTFS volumes. It supports reading partition info MBR, partition table, VBR but also information on Master File Table, Bitlocker encrypted volume, EFS encrypted files, USN journal and more. Download the latest binaries on AppVeyor or by checking the...
PetitPotam-notest
PetitPotam NTLM Relay Attack Detection A Zeek package for detecting some attempts to trigger NTLM relay attacks via the Petit Potam exploit. This package will detect what appear to be successful and unsuccessful exploit attempts. It makes a distinction between them by examining the return code fo...
rpc2wc
RPC to WebClient The information for this code can be found at this blog post. Recommend reading before attempting to use anything here. Code for triggering WebClient through an RPC call. Since it did not end up panning out the code was never very cleaned up and very much remained in a proof of...
EFS_CVE-2021-43217
EFS Bypass VulnerabilityCVE-2021-43217 Objective This vulnerability demonstration aimed to establish a controlled environment for simulating an EFS bypass on windows 10 through Kali Linux. The primary focus was to perform a vulnerability pentration and show the possiblity of controlling a desktop...
PetitPotam
PetitPotam NTLM Relay Attack Detection A Zeek package for detecting some attempts to trigger NTLM relay attacks via the Petit Potam exploit. This package will detect what appear to be successful and unsuccessful exploit attempts. It makes a distinction between them by examining the return code fo...
CVE-2026-88162
Improper authorization in Windows Encrypting File System EFS allows an authorized attacker to perform tampering locally...
CVE-2026-83683
Absolute path traversal in Windows Encrypting File System EFS allows an authorized attacker to disclose information over a network...
CVE-2026-83565
Buffer over-read in Windows Encrypting File System EFS allows an authorized attacker to disclose information locally...
CVE-2026-83565
A buffer over-read vulnerability exists in the Windows Encrypting File System (EFS) . This flaw allows an authorized attacker to perform a local information disclosure , potentially exposing sensitive data. The vulnerability is associated with CWE-126 . While the documents confirm the existence o...
CVE-2026-88162
A vulnerability exists in the Windows Encrypting File System (EFS) due to improper authorization (CWE-863 ). This flaw allows an authorized attacker to perform local tampering . The vulnerability has been confirmed by Microsoft with a base score of 5.5 and an official fix is available. No specifi...
CVE-2026-85791
A heap-based buffer overflow vulnerability exists in the Windows Encrypting File System (EFS) . This flaw allows an authorized attacker to perform a local elevation of privilege . While the documents confirm the vulnerability type and potential impact, specific details regarding the affected comp...
Windows Encrypting File System (EFS) Information Disclosure Vulnerability
Absolute path traversal in Windows Encrypting File System EFS allows an authorized attacker to disclose information over a network...
Windows Encrypting File System (EFS) Information Disclosure Vulnerability
Buffer over-read in Windows Encrypting File System EFS allows an authorized attacker to disclose information locally...
Windows Encrypting File System (EFS) Tampering Vulnerability
Improper authorization in Windows Encrypting File System EFS allows an authorized attacker to perform tampering locally...
Windows Encrypting File System (EFS) Remote Code Execution Vulnerability
Improper control of generation of code 'code injection' in Windows Encrypting File System EFS allows an authorized attacker to execute code over a network...
Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Encrypting File System EFS allows an authorized attacker to elevate privileges locally...
Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability
Absolute path traversal in Windows Encrypting File System EFS allows an authorized attacker to elevate privileges over a network...
Microsoft Windows: CVE-2026-83759: Windows Encrypting File System (EFS) Remote Code Execution Vulnerability
Improper control of generation of code 'code injection' in Windows Encrypting File System EFS allows an authorized attacker to execute code over a network...
Microsoft Windows: CVE-2026-85791: Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Encrypting File System EFS allows an authorized attacker to elevate privileges locally...