NetExec

🚩 This is the open source repository of NetExec maintained by a community of passionate people NetExec - The Network Execution Tool This project was initially created in 2015 by @byt3bl33d3r, known as CrackMapExec. In 2019 @mpgnx64 started maintaining the project for the next 4 years, adding a lo...

Kitsune

Kitsune Kitsune 은 다형성 C2Command & Control 도구입니다. 이 도구는 NetExec, Villain, Evil-WinRM 등 여러 인기 해킹 도구들을 그래픽 환경에서 사용할 수 있도록 해줍니다. 또한 자동 재연결, 보고서, 기록, 그리고 각 구현 도구별 추가 기능 등 많은 개선 사항을 제공합니다. 사용 방식은 Cobalt Strike나 Havoc과 같은 다른 C2 도구와 매우 유사하며, 리스너, 페이로드 생성기, HTTP/S 전송 등을 활용합니다. 간단하고 현대적이며 반응형 그래픽 인터페이스는 사용...

CVE-2025-33073

CVE-2025-33073 NTLM 리플렉션 SMB 결함에 대한 PoC 익스플로잇. 모든 공로는 공식 연구에 있습니다: https://www.synacktiv.com/en/publications/ntlm-reflection-is-dead-long-live-ntlm-reflection-an-in-depth-analysis-of-cve-2025 사전 요구 사항 OS: Kali Linux 대부분의 패키지가 사전 설치되어 있음. NetExec NXC - https://github.com/Pennyw0rth/NetExec...

DonPwner

🔥 DonPwner - 고급 DonPAPI 분석 및 공격 도구 고급 비밀번호 스프레이 및 자격 증명 분석 도구 - 스마트 지연 및 지터를 활용한 DonPAPI 기반 기능 • 설치 • 사용법 • 예제 • 설정 • 라이선스 🎯 소개 DonPwner는 DonPAPI 데이터베이스 결과를 활용하여 자격 증명 분석을 혁신하는 고급 침투 테스트 도구입니다. 이 도구는 계정 잠금을 방지하기 위한 내장 지연 및 지터 메커니즘을 갖춘 안전한 비밀번호 스프레이 공격 , 성공적으로 인증된 사용자의 자동 제거, 시크릿덤프 파일에 대한 자격 증명 분석...

CVE-2026-27884

NetExec is a network execution tool. Prior to version 1.5.1, the module spiderplus improperly creates the output file and folder path when saving files from SMB shares. It does not take into account that it is possible for Linux SMB shares to have path traversal characters such as ../ in them. An...

CVE-2026-27884 NetExec vulnerable to arbitrary file write via path traversal in spider_plus module

NetExec is a network execution tool. Prior to version 1.5.1, the module spiderplus improperly creates the output file and folder path when saving files from SMB shares. It does not take into account that it is possible for Linux SMB shares to have path traversal characters such as ../ in them. An...

CVE-2026-27884 NetExec vulnerable to arbitrary file write via path traversal in spider_plus module

NetExec is a network execution tool. Prior to version 1.5.1, the module spiderplus improperly creates the output file and folder path when saving files from SMB shares. It does not take into account that it is possible for Linux SMB shares to have path traversal characters such as ../ in them. An...

CVE-2026-27884

CVE-2026-27884 affects NetExec’s spider_plus module prior to version 1.5.1, where saving files from SMB shares could be manipulated due to path traversal characters like ../ in SMB paths. An attacker could craft a filename in an SMB share that, when spider_plus crawls and downloads, writes or ove...

CVE-2026-27884: Improper Limitation of a Pathname to a Restricted Directory

NetExec is a network execution tool. Prior to version 1.5.1, the module spiderplus improperly creates the output file and folder path when saving files from SMB shares. It does not take into account that it is possible for Linux SMB shares to have path traversal characters such as ../ in them. An...

NetExec 路径遍历漏洞

NetExec is a network execution tool developed by Pennyworth under open source. Versions of NetExec prior to 1.5.1 contained a path traversal vulnerability. This vulnerability stemmed from improper creation of file paths, which could lead to arbitrary file writing attacks...

PT-2026-22067

NetExec is a network execution tool. Prior to version 1.5.1, the module spider plus improperly creates the output file and folder path when saving files from SMB shares. It does not take into account that it is possible for Linux SMB shares to have path traversal characters such as ../ in them. A...