The vulnerability of the SMB protocol implementation in tools for intercepting and analyzing network traffic with tcpdump allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the SMB protocol implementation for capturing and analyzing network traffic using tcpdump exists due to insufficient verification of input data. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, and accessibility of...

metasploit-framework

This is an exploit module for the Metasploit Framework, a penetration testing tool. The module is designed to target a specific vulnerability in a Windows system, exploiting the SMB protocol to gain remote code execution. The module is written in Ruby and is part of the Metasploit Framework's...

Denial of service vulnerability in RouterOS smb service

MikroTik RouterOS is a Linux-based router operating system developed by the Latvian company MikroTik. The system can be deployed in a PC to enable it to provide router functionality. A denial of service vulnerability exists in the RouterOS smb service, which can be exploited by an attacker to...

CVE-2019-16160

An integer underflow in the SMB server of MikroTik RouterOS before 6.45.5 allows remote unauthenticated attackers to crash the service...

Exploit for CVE-2017-0143

Eternal-blue-Windows-7-Checker EternalBlue is a well-known SM...

Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft

CVE-2020-0796-SMB 该资源为CVE-2020-0796漏洞复现，包括Python版本和C++版本。主要是集合了github大神们的资源，希望您喜欢 - C++ - Python - EXP - POC 漏洞利用： - 本地EXP提权：https://github.com/danigargu/CVE-2020-0796 - 本地EXE提权: https://github.com/f1tz/CVE-2020-0796-LPE-EXP - POC版本提权： https://github.com/eerykitty/CVE-2020-0796-PoC -...

MS17-010

This repository is for public analysis of the MS17-010 vulnerability. The vulnerability is related to the SMB Server Message Block protocol and affects Windows operating systems. The repository contains various PoCs Proof of Concepts and exploits for different versions of Windows, including Windo...

MS17-010

This repository is a collection of exploits and tools for the MS17-010 vulnerability, also known as the EternalBlue exploit. The vulnerability is a remote code execution RCE bug in the SMBv1 protocol, which was used by the WannaCry ransomware in 2017. The repository contains various exploits and...

The vulnerability in the implementation of the Microsoft Server Message Block 1.0 (SMBv1) network protocol on the Windows operating system allows a hacker to execute arbitrary code.

The vulnerability of the Microsoft Server Message Block 1.0 SMBv1 network protocol implementation in the Windows operating system is related to insufficient input validation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

MEAC affected by Windows SMBv3 vulnerability

Microsoft disclosed a critical vulnerability in the way Microsoft Server Message Block 3.1.1 SMBv3 handles compressed connections. That may allow unauthenticated attackers to execute arbitrary code on a vulnerable device. Since the MEAC central emission monitoring computer EPC acts as a SMB serve...

Security Advisory - Remote Code Execution Vulnerability in Microsoft Windows SMBv1

Microsoft released a security advisory about a remote code execution vulnerability in Server Message Block Version 1 SMBv1. An attacker who successfully exploited the vulnerability could gain the ability to execute code on the target server. Vulnerability ID: HWPSIRT-2020-06149 This vulnerability...

Moderate: Red Hat Security Advisory: samba security update

An update for samba is now available for Red Hat Gluster Storage 3.5 on Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available f...

Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft

SMBGhost CVE-2020-0796 and SMBleed CVE-2020-1206 Scanner...

The vulnerability in the implementation of the Server Message Block (SMBv3) network protocol on Microsoft Windows operating systems allows a perpetrator to cause a service failure.

The vulnerability of the Server Message Block SMBv3 network protocol implementation in Microsoft Windows systems is related to improper handling of requests. Exploiting this vulnerability can allow a malicious actor to cause service interruptions by sending specially crafted packets...

Exploit for CVE-2017-0144

PoC exploit for CVE-2017-0144, also known as Eternalblue-Doublepulsar. This Metasploit module exploits the vulnerability to install a Doublepulsar backdoor on a Windows system. The module targets the SMB protocol, specifically the Ring 0 SMB TCP 445 backdoor. The exploit is designed to run on...

The vulnerability of the Microsoft Server Message Block 3.1.1 (SMBv3) network protocol in Windows operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Microsoft Server Message Block 3.1.1 SMBv3 network protocol implementation in Windows operating systems is related to object handling errors in memory. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...

The science behind Microsoft Threat Protection: Attack modeling for finding and stopping evasive ransomware

The linchpin of successful cyberattacks, exemplified by nation state-level attacks and human-operated ransomware, is their ability to find the path of least resistance and progressively move across a compromised network. Determining the full scope and impact of these attacks is one the most...

Microsoft Windows Server Message Block Remote Code Execution Vulnerability

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. Microsoft Windows Server is a server operating system. Server Message Block is one of the...

The vulnerability of the SMB_IOC_SVCENUM function in the Joyent SmartOS operating system, which allows a hacker to execute arbitrary code.

The vulnerability of the SMBIOCSVCENUM function in the open-source operating system Joyent SmartOS is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

SMBleed: A New Critical Vulnerability Affects Windows SMB Protocol

Cybersecurity researchers today uncovered a new critical vulnerability affecting the Server Message Block SMB protocol that could allow attackers to leak kernel memory remotely, and when combined with a previously disclosed "wormable" bug, the flaw can be exploited to achieve remote code executio...