32 matches found
CVE-2025-54918-POC
CVE-2025-54918 – Prueba de Concepto PoC ⚠️ Aviso Importante IMPORTANTE: Para probar CVE-2025-54918 , debe crear un registro DNS en el entorno de Active Directory de destino. Siempre consulte con el cliente y obtenga autorización explícita antes de realizar pruebas, ya que esto puede afectar el...
CVE-2025-33073
CVE-2025-33073 Exploit PoC para la vulnerabilidad de reflexión NTLM en SMB. Todo el crédito va para la investigación oficial: https://www.synacktiv.com/en/publications/ntlm-reflection-is-dead-long-live-ntlm-reflection-an-in-depth-analysis-of-cve-2025 Requisitos previos SO: Kali Linux tiene la...
CVE-2025-33073-checker
Script de verificación CVE-2025-33073 Este script de verificación PoC aproximado prueba objetivos para la vulnerabilidad CVE-2025-33073 al intentar realizar ataques de reflexión NTLM mediante la coerción de autenticación NTLM a través de samba RPC; para ello, necesitas tener una cuenta con acceso...
CVE-2025-33073
CVE-2025-33073 PoC Exploit para la vulnerabilidad de reflexión NTLM en SMB. Todo el crédito va para la investigación oficial: https://www.synacktiv.com/publications/ntlm-reflection-is-dead-long-live-ntlm-reflection-an-in-depth-analysis-of-cve-2025 Requisitos previos SO: Kali Linux tiene la mayorí...
CVE-2026-24294
CVE-2026-24294 - Escalada de Privilegios Local LPE por Reflexión NTLM vía Puerto Arbitrario SMB Escalada de privilegios local en Windows Server 2025 mediante reflexión NTLM, abusando de la función de puerto arbitrario SMB introducida en Windows 11 24H2 / Server 2025. Vulnerabilidad Windows 11 24H...
cupntlm-Automated-Exploit-For-CVE-2025-33073-
cupntlm CVE-2025-33073 — Bypass de reflexión NTLM mediante coerción DNS Herramienta de explotación automatizada para entornos de Active Directory. Descripción general cupntlm automatiza la cadena de ataque de reflexión/retransmisión NTLM que abusa de CVE-2025-33073. Combina la inyección de...
CVE-2025-33073
CVE-2025-33073 — Escalada de Privilegios por Reflexión NTLM en el Cliente SMB de Windows Informe de investigación por Sentinel AI Defense. Solo análisis defensivo — no se publica ningún exploit funcional ni PoC aquí. Una falla de control de acceso inadecuado en el Cliente SMB de Windows que reviv...
SMB-CVE-2025-33073
SMB-CVE-2025-33073 Advanced SMB Honeypot: CVE-2025-33073 Research & Implementation Advanced SMB Honeypot: Investigación y Forense de CVE-2025-33073 📌 Resumen del Proyecto Este proyecto presenta un entorno Honeypot de alta interacción diseñado para investigar, detectar y analizar intentos de...
Exploit for Improper Access Control in Microsoft
CVE-2025-33073 — Windows SMB Client NTLM Reflection EoP !CV...
Exploit for Improper Access Control in Microsoft
CVE-2025-33073 PoC Exploit for the NTLM reflection SMB flaw...
Microsoft Windows 10.0.17134.648 HTTP -> SMB NTLM Reflection Leads to Privilege Elevation Exploit
Exploit for windows platform in category local exploits Microsoft Windows 10.0.17134.648 - HTTP - SMB NTLM Reflection Leads to Privilege Elevation Exploit VULNERABILITY DETAILS It's possible to use the NTLM reflection attack to escape a browser sandbox in the case where the sandboxed process is...
Microsoft Windows 10.0.17134.648 - HTTP -> SMB NTLM Reflection Leads to Privilege Elevation
VULNERABILITY DETAILS It's possible to use the NTLM reflection attack to escape a browser sandbox in the case where the sandboxed process is allowed to create TCP sockets. In particular, I was able to combine the issues mentioned below with a bug in Chromium to escape its sandbox. HTTP - SMB NTLM...
Microsoft Exchange Server NTLM Reflection EWS User Impersonation Vulnerability
This vulnerability allows remote attackers to impersonate arbitrary users on vulnerable installations of Microsoft Exchange Server. Authentication is required to exploit this vulnerability. The specific flaw exists within the use of NTLM authentication in Exchange Server. NTLM responses produced ...
Microsoft Windows 8.1 - DCOM DCERPC Local NTLM Reflection Privilege Escalation (MS15-076)
Microsoft Windows 8.1 - DCOM DCERPC Local NTLM Reflection Privilege Escalation MS15-076 Source: https://github.com/monoxgas/Trebuchet Trebuchet MS15-076 CVE-2015-2370 Privilege Escalation Copies a file to any privileged location on disk Compiled with VS2015, precompiled exe in Binary directory...
Default Setting in Windows 7, 8.1 Could Allow Privilege Escalation
A default setting in both Windows 7 and 8.1 could allow local users to elevate privileges and in some situations, escape application sandboxes. The issue, something that leaves all current Windows client installations vulnerable, lies in the way the operating system handles authentication. In som...
SuSE 10 Security Update : XULRunner (ZYPP Patch Number 6734)
The Mozilla XULRunner engine was updated to version 1.9.0.16, fixing lots of bugs and various security issues. The following issues were fixed : - Crashes with evidence of memory corruption 1.9.0.16. MFSA 2009-65 / CVE-2009-3979 / CVE-2009-3981 - bmo487872 NTLM reflection vulnerability. MFSA...
SuSE 10 Security Update : Mozilla Firefox (ZYPP Patch Number 6735)
The Mozilla Firefox was updated to version 3.5.6, fixing lots of bugs and various security issues. The following issues were fixed : - Crashes with evidence of memory corruption rv:1.9.1.6. MFSA 2009-65 / CVE-2009-3979 / CVE-2009-3980 / CVE-2009-3982 - bmo504843,bmo523816 Memory safety fixes in...
SuSE9 Security Update : epiphany (YOU Patch Number 12616)
This update brings Mozilla SeaMonkey to 1.1.19 fixing various bugs and security issues. The following security issues are fixed : - Mozilla developers took fixes from previously fixed memory safety bugs in newer Mozilla-based products and ported them to the Mozilla 1.8.1 branch so they can be...
SeaMonkey < 1.1.19 Multiple Vulnerabilities
The installed version of SeaMonkey is earlier than 1.1.19. Such versions are potentially affected by the following security issues : - The columns of a XUL tree element can be manipulated in a particular way that would leave a pointer owned by the column pointing to freed memory. MFSA 2009-49 - A...