got-responded

| |/ \ | | | | | || || |/ | \ | || \ | || \ | | || || |||| \ | | -.-. | || || | || | || \ ||/ || ||\|||||| /|/||/|||/ Author: @wm A simple tool to detect NBT-NS and LLMNR spoofing and messing with them a bit What is it? Pentesters, Redteamers and even real attackers love to use tools like...

got-responded

| |/ | | | | | |||| |/ | \ | || \ ||| \ | | || || || || \ | |-.-. | || || | || ||| \ | |/ || ||||| ||| /| /|| /| || / 作者: @wm 一个简单的工具，用于检测 NBT-NS 和 LLMNR 欺骗（并稍微捣乱一下它们） 这是什么？ 渗透测试人员、红队成员甚至真正的攻击者都喜欢使用 Responder 之类的工具来欺骗 LLMNR 和/或 NBT-NS 响应。有一些很棒的其他工具可以帮助检测，例如...

Responder

Responder Responder 是一个 LLMNR、NBT-NS 和 MDNS 毒化工具，内置针对 HTTP、SMB、MSSQL、FTP、LDAP、Kerberos、DNS 等协议的虚假认证服务器。它支持 NTLMv1/NTLMv2/LMv2、扩展安全 NTLMSSP 以及超过 15 种协议的各种认证方法。 目录 概述 新增内容 安装 快速开始 网络毒化 虚假服务器 配置 macOS 故障排除 概述 Responder 通过响应 LLMNR、NBT-NS 和 MDNS 名称解析请求来捕获凭证。当客户端尝试解析不存在的主机名时，Responder...

Responder

⛔ 已弃用 当前活跃版本位于 https://github.com/lgandx/Responder Responder.py LLMNR/NBT-NS/mDNS 投毒工具 作者：Laurent Gaffie http://www.spiderlabs.com 简介 Responder 是一个 LLMNR、NBT-NS 和 MDNS 投毒工具。它会根据名称后缀来回应 特定 的 NBT-NS（NetBIOS 名称服务）查询（参见：http://support.microsoft.com/kb/163409）。默认情况下，该工具仅回应文件服务器服务请求，即 SMB。...

CVE-2023-54396

PocketMine-MP versions before 4.8.1 fail to validate dye color IDs in banner NBT data during deserialization. Attackers can provide invalid color values in inventory transactions or via commands to trigger undefined offset errors and crash the server...

CVE-2023-54392

PocketMine-MP versions = 4.20.0 before 4.22.3 and before 5.2.1 in the 5.x branch fail to validate NBT tag types in BlockActorDataPacket. A player can crash the server by sending a packet containing sign NBT data with an incorrect tag type, triggering an unhandled UnexpectedTagTypeException that...

CVE-2023-54396 PocketMine-MP before 4.8.1 Server Crash via Banner NBT

PocketMine-MP versions before 4.8.1 fail to validate dye color IDs in banner NBT data during deserialization. Attackers can provide invalid color values in inventory transactions or via commands to trigger undefined offset errors and crash the server...

CVE-2023-54396 PocketMine-MP before 4.8.1 Server Crash via Banner NBT

PocketMine-MP versions before 4.8.1 fail to validate dye color IDs in banner NBT data during deserialization. Attackers can provide invalid color values in inventory transactions or via commands to trigger undefined offset errors and crash the server...

CVE-2023-54396

PocketMine-MP versions before 4.8.1 fail to validate dye color IDs in banner NBT data during deserialization. Attackers with low privileges can supply invalid color values through inventory transactions or via commands , triggering undefined offset errors that crash the server. The impact is avai...

EUVD-2023-60626

PocketMine-MP versions before 4.8.1 fail to validate dye color IDs in banner NBT data during deserialization. Attackers can provide invalid color values in inventory transactions or via commands to trigger undefined offset errors and crash the server...

CVE-2023-54396 PocketMine-MP before 4.8.1 Server Crash via Banner NBT

PocketMine-MP versions before 4.8.1 fail to validate dye color IDs in banner NBT data during deserialization. Attackers can provide invalid color values in inventory transactions or via commands to trigger undefined offset errors and crash the server...

EUVD-2023-60622

PocketMine-MP versions = 4.20.0 before 4.22.3 and before 5.2.1 in the 5.x branch fail to validate NBT tag types in BlockActorDataPacket. A player can crash the server by sending a packet containing sign NBT data with an incorrect tag type, triggering an unhandled UnexpectedTagTypeException that...

CVE-2023-54392

PocketMine-MP versions ≥ 4.20.0 before 4.22.3 (and before 5.2.1 in the 5.x branch) fail to validate NBT tag types in the BlockActorDataPacket . An authenticated player can send a packet containing sign NBT data with an incorrect tag type, triggering an unhandled UnexpectedTagTypeException that te...

CVE-2023-54392 PocketMine-MP before 4.22.3 Denial of Service via BlockActorDataPacket

PocketMine-MP versions = 4.20.0 before 4.22.3 and before 5.2.1 in the 5.x branch fail to validate NBT tag types in BlockActorDataPacket. A player can crash the server by sending a packet containing sign NBT data with an incorrect tag type, triggering an unhandled UnexpectedTagTypeException that...

CVE-2023-54392 PocketMine-MP before 4.22.3 Denial of Service via BlockActorDataPacket

PocketMine-MP versions = 4.20.0 before 4.22.3 and before 5.2.1 in the 5.x branch fail to validate NBT tag types in BlockActorDataPacket. A player can crash the server by sending a packet containing sign NBT data with an incorrect tag type, triggering an unhandled UnexpectedTagTypeException that...

CVE-2023-54392 PocketMine-MP before 4.22.3 Denial of Service via BlockActorDataPacket

PocketMine-MP versions = 4.20.0 before 4.22.3 and before 5.2.1 in the 5.x branch fail to validate NBT tag types in BlockActorDataPacket. A player can crash the server by sending a packet containing sign NBT data with an incorrect tag type, triggering an unhandled UnexpectedTagTypeException that...

PT-2026-88987

PocketMine-MP versions before 4.8.1 fail to validate dye color IDs in banner NBT data during deserialization. Attackers can provide invalid color values in inventory transactions or via commands to trigger undefined offset errors and crash the server...

CVE-2023-54392: Improper Input Validation

PocketMine-MP versions = 4.20.0 before 4.22.3 and before 5.2.1 in the 5.x branch fail to validate NBT tag types in BlockActorDataPacket. A player can crash the server by sending a packet containing sign NBT data with an incorrect tag type, triggering an unhandled UnexpectedTagTypeException that...

CVE-2023-54396: Improper Validation of Array Index

PocketMine-MP versions before 4.8.1 fail to validate dye color IDs in banner NBT data during deserialization. Attackers can provide invalid color values in inventory transactions or via commands to trigger undefined offset errors and crash the server...

CVE-2022-51017

PocketMine-MP versions before 3.26.5 and 4.0.5 fail to validate the length of skin data fields submitted by players, allowing uncapped values to exceed the 32767 byte TAGString limit. Attackers can submit oversized skin data fields like skinID or geometryName to trigger exceptions during NBT data...