23 matches found
CVE-2025-24054_CVE-2025-24071-PoC
CVE-2025-24054 and CVE-2025-24071 - NTLM Hash Leak via .library-ms Exploit This PoC demonstrates the exploitation of the NTLM hash leak via .library-ms files on unpatched Windows systems March 2025 Patch Tuesday. ⚠️ This is for educational and research purposes only. Do not use this on production...
CVE-2025-24071-msfvenom
CVE-2025-24071: NTLM Hash Leak via .library-ms File Metasploit Module This repository contains a Metasploit module to exploit CVE-2025-24071, a vulnerability in Windows Explorer that leaks NTLM hashes when a malicious .library-ms file is extracted from a ZIP archive. Developed by: FOLKS-IWD...
CVE-2025-24071
Security Vulnerability Report: CVE-2025-24071 - Windows File Explorer Spoofing Vulnerability Overview NSFOCUS CERT has detected that Microsoft recently released a security update to address a critical spoofing vulnerability in Windows File Explorer, identified as CVE-2025-24071. This vulnerabilit...
CVE-2025-24071
安全漏洞报告：CVE-2025-24071 - Windows文件资源管理器欺骗漏洞 概述 NSFOCUS CERT 检测到微软最近发布了一个安全更新，以修复 Windows 文件资源管理器中的一个严重欺骗漏洞，该漏洞被标识为 CVE-2025-24071 。此漏洞的 CVSS 评分为 7.5，表明其严重程度。此问题源于 Windows 资源管理器对 .library-ms 文件的隐式信任和自动文件解析行为。未经身份验证的攻击者可以通过构建包含恶意 SMB 路径的 RAR/ZIP 文件来利用此漏洞。解压缩后，会触发 SMB 身份验证请求，可能泄露用户的 NTLM 哈希。该漏洞的...
CVE-2025-24071
CVE-2025-24071 Windows File Explorer Spoofing Vulnerability - CVE-2025-24071 Leak the NTLM hash of Windows through the extraction of a manipulated ZIP or RAR file, and by exploiting a vulnerability in the handling of .library-ms files a type of file used by Windows to specify libraries and networ...
CVE-2025-24071-Exploit
CVE-2025-24071-Exploit Đây chỉ là tài liệu mang tính chất học tập. Chỉ xem tham khảo và đừng làm phiền chính quyền. This content is for educational purposes only. Use for reference only and do not contact the police. Vulnerability Details CVE ID : CVE-2025-24071 Vulnerable System : NTLM Hash Leak...
CVE-2025-24071_PoC
CVE-2025-24071PoC CVE-2025-24071: NTLM Hash Leak via RAR/ZIP Extraction and .library-ms File Windows Explorer automatically initiates an SMB authentication request when a .library-ms file is extracted from a .rar archive, leading to NTLM hash disclosure. The user does not need to open or execute...
CVE-2025-24071
CVE-2025-24071PoC CVE-2025-24071: NTLM Hash Leak via RAR/ZIP Extraction and .library-ms File Windows Explorer automatically initiates an SMB authentication request when a .library-ms file is extracted from a .rar archive, leading to NTLM hash disclosure. The user does not need to open or execute...
CVE-2025-24071
CVE-2025-24071 - Windows File Explorer NTLM Hash Leak 📋 Overview CVE-2025-24071 is a vulnerability in Windows File Explorer that allows unauthorized disclosure of NTLM hashes. When a user extracts a specially crafted .zip archive containing a malicious .library-ms file, Windows Explorer...
cve-2025-24054
CVE-2025-24071: NTLM Hash Leak via .library-ms File Metasploit Module This repository contains a Metasploit module to exploit CVE-2025-24071, a vulnerability in Windows Explorer that leaks NTLM hashes when a malicious .library-ms file is extracted from a ZIP archive. Developed by: FOLKS-IWD...
CVE-2025-24071
CVE-2025-24071: Microsoft Windows File Explorer Spoofing Vulnerability script by SilentExploit 📖 Description This project detects and demonstrates exploitation of a Windows File Explorer spoofing vulnerability. The issue arises from a Windows library file .library-ms containing a network path,...
CVE-2025-24071
CVE-2025-24071 This Python script is designed to demonstrate the CVE-2025-24071 vulnerability in Windows Explorer. This vulnerability allows an attacker to capture netNTLMv2 credentials from a victim without any direct interaction from the victim. Description The CVE-2025-24071 vulnerability exis...
cve-2025-24071
CVE-2025-24054 and CVE-2025-24071 - NTLM Hash Leak via .library-ms Exploit This PoC demonstrates the exploitation of the NTLM hash leak via .library-ms files on unpatched Windows systems March 2025 Patch Tuesday. ⚠️ This is for educational and research purposes only. Do not use this on production...
CVE-2025-24054-24071---Metasploit-Module
CVE-2025-24054/24071 - Metasploit 模块 概述 该漏洞发生在解压 .zip 文件的过程中。当与特制的 .library-ms 文件交互时，Windows 资源管理器会处理内部的 XML 架构，并自动向攻击者控制的远程路径发起 SMB 身份验证请求。 这种行为允许在无需用户进行解压文件之外的任何额外交互的情况下，泄露用户的 NTLM 哈希值。如需查看概念验证，建议访问以下链接：Fluffy - HTB。 ⚠️ 重要说明： 尽管该漏洞最初以 CVE-2025-24071 传播，但目前官方追踪编号为 CVE-2025-24054。 📌 安装 克隆仓库：...
CVE-2025-24054-PoC
CVE-2025-24054 PoC A simple Proof of Concept for CVE-2025-24054 – Windows Library .library-ms NTLM Hash Disclosure Vulnerability. ⚠️ For Educational and Authorized Lab Use Only Description CVE-2025-24054 allows an attacker to force a Windows system to leak the victim's Net-NTLMv2 hash by using a...
Blackash-CVE-2025-24071
Blackash-CVE-2025-24071 CVE-2025-24071：通过 .library-ms 文件泄露 NTLM 哈希的 Metasploit 模块 🚨 描述 Windows 文件资源管理器将敏感信息暴露给未经授权的攻击者，使得未经授权的攻击者可以通过网络进行欺骗。 指标 CNA：Microsoft 公司 基础得分：6.5 中等 🟠 向量：CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N 概述 当用户解压包含特制 .library-ms 文件的 ZIP 压缩包时，漏洞便会触发。Windows 资源管理器会自动向文件中指定的远程服务器发...
Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Microsoft
CVE-2025-24071 — Windows File Explorer Spoofing / NTLM Hash Di...
Exploit for External Control of File Name or Path in Microsoft
CVE-2025-24054 — Detection & Mitigation Lab Project log for a...