Project-NTLM-Hash-Capture-and-Phishing-Email-Exploitation-for-CVE-2024-21413

Obiettivo del Progetto: Il progetto è stato creato per dimostrare l'uso di vari strumenti per catturare hash NTLM dagli utenti su una rete e per eseguire attacchi di phishing tramite email. Questo mostra come le vulnerabilità di autenticazione di rete e i metodi di phishing possano essere sfrutta...

monikerlinktest

monikerlinktest cve-2024-21413 1. Richte tun0 oder ein anderes tun über OpenVPN mit einer beliebigen OVPN-Datei auf dem Router ein. 2. Installiere Remmina, falls noch nicht geschehen. 3. RDP mit Remmina auf den Ziel-Desktop über den Port, mit dem dein OVPN verbunden ist ip link delete denjenigen,...

Bad-Pdf

Bad-Pdf Bad-PDF crea un file PDF malevolo per rubare hash NTLM NTLMv1/NTLMv2 da macchine Windows, sfruttando una vulnerabilità divulgata dal team di Checkpoint per creare il file PDF malevolo. Bad-PDF legge gli hash NTLM utilizzando il listener di Responder. Questo metodo funziona su tutti i...

Responder

⛔ DEPRECATO Attivo su https://github.com/lgandx/Responder Responder.py LLMNR/NBT-NS/mDNS Poisoner Autore: Laurent Gaffie http://www.spiderlabs.com Introduzione Responder è un avvelenatore LLMNR, NBT-NS e MDNS. Risponde a query NBT-NS NetBIOS Name Service specifiche in base al suffisso del nome...

CVE-2025-24071-Exploit

CVE-2025-24071-Exploit Este é apenas um material de caráter educacional. Apenas para referência e não perturbe as autoridades. Este conteúdo é apenas para fins educacionais. Use apenas como referência e não entre em contato com a polícia. Detalhes da Vulnerabilidade CVE ID : CVE-2025-24071 Sistem...

Responder

Responder Responder è un poisoner LLMNR, NBT-NS e MDNS con server di autenticazione rogue integrati per HTTP, SMB, MSSQL, FTP, LDAP, Kerberos, DNS e altro. Supporta NTLMv1/NTLMv2/LMv2, NTLMSSP esteso e vari metodi di autenticazione su oltre 15 protocolli. Indice Panoramica Novità Installazione...

Nac_Bypass_Agent

Nac Bypass Agent Questo pezzo di codice è uno script scritto in Python e progettato per essere eseguito su Kali Linux. Ecco un riepilogo che spiega cosa fa ogni funzione: runcommandcommand: Questa funzione esegue il comando che prende in input e restituisce il suo output. killnetworkservices:...

ridrelay

RidRelay Quick and easy way to get domain usernames while on an internal network. Hit me up: @skorov8 How it works RidRelay combines the NTLM Relay attack, common lsarpc based queries and RID cycling to get a list of domain usernames. It takes these steps: 1. Spins up an SMB and HTTP servers and...

atomic-red-team

Atomic Red Team Atomic Red Team™ is a library of tests mapped to the MITRE ATT&CK® framework. Security teams can use Atomic Red Team to quickly, portably, and reproducibly test their environments. Get started You can execute atomic tests directly from the command line, no installation required. S...

cyanide

Was ist Cyanide? Wie der Name schon vermuten lässt, ist es Gift. Cyanide ist im Wesentlichen ein Tracker zur Korrelation verschiedener Poisoning-Techniken derzeit wird nur Responder verwendet in Verbindung mit dem Relayen der erbeuteten Hashes über Impackets ntlmrelayx.py. Beim Start wird Respond...

eaphammer

by Gabriel Ryan s0lst1c3 Current release: v1.14.1 Supports Python 3.9+. Overview EAPHammer is a toolkit for performing targeted evil twin attacks against WPA2-Enterprise networks. It is designed to be used in full scope wireless assessments and red team engagements. As such, focus is placed on...

evil-ssdp

Overview This tool responds to SSDP multicast discover requests, posing as a generic UPNP device. Your spoofed device will magically appear in Windows Explorer on machines in your local network. Users who are tempted to open the device are shown a configurable phishing page. This page can load a...

got-responded

root@kitploit: | |/ \ | | | | | || || |/ | \ | || \ | || \ | | || || |||| \ | | -.-. | || || | || | || \ ||/ || ||\|||||| /|/||/|||/ Author: @wm A simple tool to detect NBT-NS and LLMNR spoofing and messing with them a bit What is it? Pentesters, Redteamers and even real attackers love to...

CVE-2026-13343

The UMP Stream responder library in lib/midi2/umpstreamresponder.c builds reply packets in a 16-byte struct midiump uint32t data4. The builders makeendpointinfo and makefunctionblockinfo populate only the first two words res.data0 and res.data1 and, before this fix, declared their result as an...

CVE-2026-13343 Uninitialised stack memory disclosure in the MIDI 2.0 UMP Stream responder

The UMP Stream responder library in lib/midi2/umpstreamresponder.c builds reply packets in a 16-byte struct midiump uint32t data4. The builders makeendpointinfo and makefunctionblockinfo populate only the first two words res.data0 and res.data1 and, before this fix, declared their result as an...

CVE-2026-13343

CVE-2026-13343 affects the Zephyr RTOS UMP Stream responder library (lib/midi2/ump_stream_responder.c). The functions make_endpoint_info() and make_function_block_info() declare a local struct midi_ump without initialisation, populating only the first two of four uint32_t words. The remaining two...

EUVD-2026-64924

The UMP Stream responder library in lib/midi2/umpstreamresponder.c builds reply packets in a 16-byte struct midiump uint32t data4. The builders makeendpointinfo and makefunctionblockinfo populate only the first two words res.data0 and res.data1 and, before this fix, declared their result as an...

kcmdump

KCM dumper Schnelles Skript zum Auslesen der von SSSD verwendeten KCM-Datenbank und zum Wiederherstellen von Kerberos-Tickets im CCACHE-Format. Ursprünglich basierend auf SSSDKCMExtractor und KCMTicketFormatter. Beschreibung Seit Version 2.0.0 2018-08-13 verschlüsselt der Backend-Speicher des...

PT-2026-80902

The UMP Stream responder library in lib/midi2/ump stream responder.c builds reply packets in a 16-byte struct midi ump uint32 t data4. The builders make endpoint info and make function block info populate only the first two words res.data0 and res.data1 and, before this fix, declared their result...

lnkbomb

Lnkbomb Lnkbomb is used for uploading malicious shortcut files to insecure file shares. The vulnerability exists due to Windows looking for an icon file to associate with the shortcut file. This icon file can be directed to a penetration tester's machine running Responder or smbserver to gather...