Farmer

Farmer 작성자: @domchell 개요 나는 농부가 되고 싶어서 해시를 수확하기 시작했습니다 Farmer는 Windows 도메인에서 NetNTLM 해시를 수집하기 위한 프로젝트입니다. Farmer는 로컬 WebDAV 서버를 생성하여 WebDAV 미니 리디렉터가 연결하는 모든 클라이언트에서 인증하도록 만듭니다. Farmer가 성공하려면 클라이언트가 로컬 WebDAV 서버에 연결할 수 있어야 합니다. 이를 방해할 수 있는 요소로는 네트워크 분할 및/또는 Windows 방화벽이 있습니다. 먼저 이를 확인하십시오힌트 Seatbe...

CVE-2023-23397-PoW

CVE-2023-23397-PoW CVE-2023-23397の脆弱性を持つMicrosoft Outlookクライアントアプリケーション向けのProof of Workです。 教育および研究目的のみで使用してください。 CVE-2023-23397 概要 このCVEは、最後にパッチが適用されたバージョンを除くMicrosoft Outlookクライアントバージョン2016において、ログオン中のユーザーからNetNTLMハッシュを取得することを目的としています。 再現手順と悪用の成功手順 SMB共有としてデプロイされるSMBマシンに任意のサウンドファイルをダウンロードします。...

LeakedWallpaper

Leaked Wallpaper これは権限昇格ツールです（KB5040434 で CVE-2024-38100 として修正済み）。低権限ユーザーで作業している場合でも、コンピューター上の任意のセッションからユーザーの NetNTLM ハッシュを漏えいさせることができます。 使用方法 root@kitploit: .\LeakedWallpaper.exe \\c$\1.jpg -downgrade Example .\LeakedWallpaper.exe 1 \172.16.0.5\c$\1.jpg -downgrade デモ 動画...

EUVD-2021-16051

Malware in sbrugna...

CVE-2021-29416

An issue was discovered in PortSwigger Burp Suite before 2021.2. During viewing of a malicious request, it can be manipulated into issuing a request that does not respect its upstream proxy configuration. This could leak NetNTLM hashes on Windows systems that fail to block outbound SMB...

Exploit for Improper Input Validation in Microsoft

CVE-2023-23397-PoW Proof of Work of CVE-2023-23397 for vulnera...

CVE-2021-29416

An issue was discovered in PortSwigger Burp Suite before 2021.2. During viewing of a malicious request, it can be manipulated into issuing a request that does not respect its upstream proxy configuration. This could leak NetNTLM hashes on Windows systems that fail to block outbound SMB...

CVE-2021-29416

CVE-2021-29416 affects PortSwigger Burp Suite prior to 2021.2. During viewing of a malicious request, Burp Suite can be manipulated to issue a request that ignores its upstream proxy configuration, potentially leaking NetNTLM hashes on Windows systems that do not block outbound SMB. The issue is ...

CVE-2021-29416

An issue was discovered in PortSwigger Burp Suite before 2021.2. During viewing of a malicious request, it can be manipulated into issuing a request that does not respect its upstream proxy configuration. This could leak NetNTLM hashes on Windows systems that fail to block outbound SMB...