CVE-2023-23397-PoW

CVE-2023-23397-PoW Prueba de concepto de CVE-2023-23397 para la aplicación cliente vulnerable de Microsoft Outlook. Solo con fines educativos y de investigación. Vista previa de CVE-2023-23397 Este CVE tenía como objetivo recuperar el hash NetNTLM del usuario que ha iniciado sesión desde la versi...

Farmer

Farmer Author: @domchell Overview I wanted to be a farmer, so I started harvesting hashes Farmer is a project for collecting NetNTLM hashes in a Windows domain. Farmer achieves this by creating a local WebDAV server that causes the WebDAV Mini Redirector to authenticate from any connecting client...

LeakedWallpaper

Leaked Wallpaper This is a privilege escalation tool fixed with CVE-2024-38100 in KB5040434 that allows us to leak a user's NetNTLM hash from any session on the computer, even if we are working from a low-privileged user. Usage root@kitploit: .\LeakedWallpaper.exe \\c$\1.jpg -downgrade Example...

EUVD-2021-16051

Malware in sbrugna...

CVE-2021-29416

An issue was discovered in PortSwigger Burp Suite before 2021.2. During viewing of a malicious request, it can be manipulated into issuing a request that does not respect its upstream proxy configuration. This could leak NetNTLM hashes on Windows systems that fail to block outbound SMB...

Exploit for Improper Input Validation in Microsoft

CVE-2023-23397-PoW Proof of Work of CVE-2023-23397 for vulnera...

CVE-2021-29416

An issue was discovered in PortSwigger Burp Suite before 2021.2. During viewing of a malicious request, it can be manipulated into issuing a request that does not respect its upstream proxy configuration. This could leak NetNTLM hashes on Windows systems that fail to block outbound SMB...

CVE-2021-29416

An issue was discovered in PortSwigger Burp Suite before 2021.2. During viewing of a malicious request, it can be manipulated into issuing a request that does not respect its upstream proxy configuration. This could leak NetNTLM hashes on Windows systems that fail to block outbound SMB...

CVE-2021-29416

CVE-2021-29416 affects PortSwigger Burp Suite prior to 2021.2. During viewing of a malicious request, Burp Suite can be manipulated to issue a request that ignores its upstream proxy configuration, potentially leaking NetNTLM hashes on Windows systems that do not block outbound SMB. The issue is ...