11932 matches found
CVE-2007-2447
CVE-2007-2447 Samba Exploit A standalone Rust implementation of the CVE-2007-2447 exploit targeting Samba smbd 3.0.20-Debian. Vulnerability Description CVE-2007-2447 is a command injection vulnerability in Samba versions 3.0.0 through 3.0.25rc3. The vulnerability exists in the SamrChangePassword...
CVE-2026-4480-exploit-poc
Usage: For anonymos login: python3 exploit.py --lhost --lport -t -N it is for anonymous login Login via credentials: python3 exploit.py --lhost --lport -t -u -p ! Error: the following arguments are required: -s/--sharename Note: if user is anonymous and no password, then just add -N without -u or...
CVE-2025-10230
CVE-2025-10230: Samba Critical RCE CVSS 10.0 Vulnerability Summary CVE-2025-10230 is a critical remote code execution RCE vulnerability that remained hidden in the Samba codebase for 13 years. The flaw resides in the handling of WINS Windows Internet Name Service registration packets. When...
CVE-2007-2447
CVE-2007-2447 CVE-2007-2447 - Script de usermap de Samba. https://amriunix.com/post/cve-2007-2447-samba-usermap-script/ Uso: $ python usermapscript.py RHOST -- La dirección objetivo RPORT -- El puerto objetivo TCP : 139 LHOST -- La dirección de escucha LPORT -- El puerto de escucha Instalación...
Penetration-Testing-on-Metasploitable2
Internship Project 2 — Penetration Testing on Metasploitable2 Summary: This project demonstrates a complete penetration testing workflow: reconnaissance, enumeration, exploitation, post-exploitation validation, and mitigation recommendations. The target used is Metasploitable2 and the attack box ...
pth-toolkit
pth-toolkit A modified version of the passing-the-hash tool collection https://code.google.com/p/passing-the-hash/ designed to be portable and work straight out of the box even on the most 'bare bones' systems The master branch is compiled for amd64, the final goal will be to cross compile these...
cve-2019-6453-poc
CVE-2019-6453: RCE en mIRC 7.55 mediante inyección de argumentos a través de manejadores de protocolo URI personalizados Encontramos una vulnerabilidad de ejecución remota de código en mIRC a través del manejador de protocolo URI irc://. Debido a que mIRC no usa ningún tipo de sigilo como -- para...
Samba-CVE-2017-7494
Samba-CVE-2017-7494 https://www.zer0d0y.info/post/notes-on-bug-hunting-labs/...
metasploitable-pentest-lab
Explotación de vulnerabilidades en Metasploitable Ciclo completo de un ataque real sobre un entorno controlado y aislado: preparación del laboratorio, reconocimiento con nmap, priorización de superficie de ataque, mapeo a CVE, explotación con Metasploit, post-explotación, extracción y cracking de...
metasploitable2-exploitation-metasploit
Exploiting Metasploitable2 with Metasploit: VSFTPD, Samba, and More A hands-on walkthrough of exploitation using the Metasploit Framework — from PostgreSQL database setup and dbnmap scanning, through three root shells via vsftpd, Samba, and UnrealIRCd, to credential exfiltration with Netcat...
cdt-samba-deploy
cdt-samba-deploy Playbook de Ansible CDT para desplegar CVE-2017-7494, también conocido como "SambaCry", en una máquina Ubuntu...
CVE-2017-7494
CVE-2017-7494 Exploit remoto como root para la vulnerabilidad SAMBA CVE-2017-7494. Detalles Este exploit se divide en 2 partes: Primero, compila un payload llamado "implant.c" y genera una librería libimplantx32.so o libimplantx64.so que cambia al usuario root, se separa del proceso padre y gener...
cdt-vulnsamba-deploy
Equipo Delta CDT - Despliegue de Samba Vulnerable Resumen Este repositorio es un despliegue basado en Ansible de un servidor de archivos Samba vulnerable afectado por CVE-2017-7494, una vulnerabilidad crítica de ejecución remota de código. Se espera que sea desplegado para el equipo Delta durante...
CVE-2025-33073-checker
CVE-2025-33073 Checker Script This rough PoC checker script tests targets for CVE-2025-33073 vulnerability by attempting to perform NTLM reflection attacks using NTLM auth coercion via samba RPC, to do this you need to have account with access to the samba. Also you need to register a domain...
CVE-2021-44142
CVE-2021-44142 Vulnerability Checker A tool to check if a Samba server is vulnerable to CVE-2021-44142 Background CVE-2021-44142 is a heap out-of-bounds read and write in Samba's vfsfruit module used at Pwn2Own Austin 2021 against the Western Digital PR4100. It was first discovered by Nguyễn Hoàn...
Exploiting-Samba-on-Metasploitable-2
Explotando-Samba-en-Metasploitable-2 Mi objetivo aquí fue utilizar metasploit desde una máquina Kali Linux para explotar una vulnerabilidad conocida de samba CVE-2007-2447. Esto se hace con el fin de infiltrar una máquina Metasploitable 2 con una shell reversa para acceder a la carpeta raíz. Una...
Samba-CVE-2021-44142
CVE-2021-44142 Vulnerability Checker A tool to check if a Samba server is vulnerable to CVE-2021-44142 Background CVE-2021-44142 is a heap out-of-bounds read and write in Samba's vfsfruit module used at Pwn2Own Austin 2021 against the Western Digital PR4100. It was first discovered by Nguyễn Hoàn...
CVE-2025-10230
CVE-2025-10230 PoC for CVE-2025-10230 - Samba WINS hook command injection The configuration required for this vulnerability probably affects 0 people. The injection is limited to 15 characters and must be a valid WINS name so no ;...
smb-usermap
Samba "username map script" Command Execution This module exploits a command execution vulnerability in Samba versions 3.0.20 through 3.0.25rc3 when using the non-default "username map script" configuration option. By specifying a username containing shell meta characters, attackers can execute...
Samba-Usermap-exploit
CVE-2007-2447 - Exploit de usermap de Samba. Uso: $ python3 exploit.py RHOST -- La dirección objetivo RPORT -- El puerto objetivo TCP : 139 LHOST -- La dirección de escucha LPORT -- El puerto de escucha Instalación git clone https://github.com/Nosferatuvjr/Samba-Usermap-exploit pip install -r...