SMBCrunch

SMBCrunch Una de las tareas que más tiempo consume para un red teamer es sumergirse en sistemas de archivos y recursos compartidos, intentando identificar cualquier información potencialmente sensible. SMBCrunch permite a un red teamer identificar rápidamente recursos compartidos de archivos de...

Snaffler

Snaffler 它的用途是什么？ Snaffler 是一款面向渗透测试人员 和红队成员 的工具，旨在帮助在大量乏味讨厌的干草堆（庞大的 Windows/AD 环境）中找到美味的糖果针（主要是凭据，但也很灵活）。 它也可能对其他做其他事情的人有用，但明确来说，它并非设计为“审计”工具。 我不想读所有这些！！！ 呃，好吧。但我们不对结果负责。我们为你写了所有这些，不过没关系。我们不生气，只是失望。 snaffler.exe -s -o snaffler.log 它是做什么的？ 广义上讲 - 它从 Active Directory 获取 Windows 计算机列表，然后将其 snaffly...

SharpShares

SharpShares 多线程C .NET程序集，用于枚举域中可访问的网络共享 基于 djhohnstein 的 SharpShares 项目 root@kitploit: .\SharpShares.exe help Usage: SharpShares.exe /threads:50 /ldap:servers /ou:"OU=Special Servers,DC=example,DC=local" /filter:SYSVOL,NETLOGON,IPC$,PRINT$ /verbose /outfile:C:\path\to\file.txt Optional Arguments:...

CredCrack

CredCrack ⛔ 已弃用。此仓库不再维护。请考虑使用 CrackMapExec。 简介 CredCrack 是一款快速且隐蔽的凭据收集工具。它能递归地从内存中以明文形式窃取凭据。任务完成后，CredCrack 会解析并输出凭据，同时识别所获取的域管理员账户。此外，CredCrack 还具备列出和枚举共享访问的能力，并且支持多线程！ CredCrack 已在 Kali Linux 原生工具环境下测试通过。它仅依赖于 PowerSploit 的 "Invoke-Mimikatz.ps1" 文件，需放在 /var/www 目录下。点击此处下载 Invoke-Mimikatz 帮助...

WinShareEnum

WinShareEnum Enumerador de recursos compartidos de Windows descarga https://github.com/nccgroup/WinShareEnum/raw/master/Info/WinShareEnum.exe ejecutándose contra un rango en mi red local sin dominio, con algunos recursos compartidos de prueba. Recuerde que está diseñado principalmente para redes...

EUVD-2026-68465

DataEase before 2.10.26 contains multiple access control defects in the sharing link module. Tickets are not bound to the target share UUID, so a valid ticket issued for one share can be reused against another ShareTicketManage.validateTicket / POST /de2api/share/proxyInfo. The POST...

TaskHound - Windows Privileged Scheduled Task Discovery Tool

TaskHound is a tool that hunts for Windows scheduled tasks that run with privileged accounts and stored credentials. It enumerates tasks over SMB, parses XMLs, and identifies high-value attack opportunities through BloodHound support...

Nextcloud: Nextcloud Tables v1 Share Enumeration Without Authorization (Regression of CVE-2024-52507)

A vulnerability was discovered in Nextcloud Tables v1 that allowed unauthorized users to enumerate shares. The vulnerability was a regression of a previously addressed issue, CVE-2024-52507...

Security fix for the ALT Linux 10 package samba version 4.16.9-alt1

4.16.9-alt1 built March 2, 2023 Evgeny Sinelnikov in task 315490 Feb. 20, 2023 Evgeny Sinelnikov - Update to maintenance release of Samba 4.16 - Security fixes: + CVE-2022-38023: Samba should refuse RC4 aka md5 based SChannel on NETLOGON Samba15240. - Major fixes: + smbcgetxattr return value is...

SMBMap - Samba Share Enumeration Tool

SMBMap allows users to enumerate samba share drives across an entire domain. List share drives, drive permissions, share contents, upload/download functionality, file name auto-download pattern matching, and even execute remote commands. This tool was designed with pen testing in mind, and is...

SMB Share Enumeration

This module determines what shares are provided by the SMB service and which ones are readable/writable. It also collects additional information such as share types, directories, files, time stamps, etc. By default, a RubySMB netshareenumall request is done in order to retrieve share information,...

Cisco ASA CIFS Share Enumeration Denial of Service Vulnerability

A vulnerability in the WebVPN Common Internet File System CIFS access function of Cisco Adaptive Security Appliance ASA could allow an authenticated, remote attacker to trigger a reload of the affected device. The vulnerability is due to missing bounds checks on the response received from the CIF...

Nmap NSE net: smb-enum-shares

Attempts to list shares using the 'srvsvc.NetShareEnumAll' MSRPC function and retrieve more information about them using 'srvsvc.NetShareGetInfo'. If access to those functions is denied, a list of common share names are checked. Finding open shares is useful to a penetration tester because there...

CVE-2010-1830

AFP Server in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 generates different error messages depending on whether a share exists, which allows remote attackers to enumerate valid share names via unspecified vectors...

smb-enum-shares NSE Script

Attempts to list shares using the srvsvc.NetShareEnumAll MSRPC function and retrieve more information about them using srvsvc.NetShareGetInfo. If access to those functions is denied, a list of common share names are checked. Finding open shares is useful to a penetration tester because there may ...