PowerHuntShares

PowerHuntShares v2 PowerHuntShares is PowerShell tool designed to help cybersecurity teams and penetration testers better identify, understand, attack, and remediate SMB shares in the Active Directory environments they protect. Every hacker has a story about abusing SMB shares, but it’s an attack...

smbeagle

/ \ / // / / / // / / / / / ///\ / / / / / / / / / / / / / / // / / / / , / / / // // / / / / // // / // ,// ///||////,// ///, / PRESENTS // SMBeagle SMBeagle is a cross-platform SMB fileshare auditing tool that hunts out all files it can see in the network and reports if the file can be...

SMBCrunch

SMBCrunch One of the most time consuming tasks as a red teamer is diving into filesystems and shares, attempting to identify any potentially sensitive information. SMBCrunch allows a red teamer to quickly identify Windows File Shares in a network, performs a recursive directory listing of the...

sharesniffer

sharesniffer sharesniffer is a network analysis tool for finding open and closed file shares on your local network. It includes auto-network discovery and auto-mounting of any open cifs and nfs shares. How to use Example to find all hosts on any local network with open/closed nfs/smb shares: pyth...

azurelinux

Azure Linux 4 An open-source Linux distribution built and optimized forAzure, with sources derived from Fedora Linux. Azure Linux provides a secured, reliable operating system for virtual machines, containers, and bare-metal platforms. Azure Linux is built on a robust open-source foundation from...

SambaHunter

SambaHunter It is a simple script to exploit RCE for Samba CVE-2017-7494. Now works with Python3. Many of the required Python2 libraries are deprecated e.g. commands Added logging to show which shares are writeable. If 'Exploit Finished' appears but no shares are writeable, the exploit didn't wor...

iberyanbytes

Iberyanbytes AD enumeration tool, which allows taking information that is related to the network and gathering information about network interfaces, IP configuration, DNS, and routing tables. It enumerates network shares and analyses share permissions, gathers details about installed software,...

enum_shares

enumshares 공유 폴더 열거 도구 EnumShares 네트워크 전반의 공유 폴더를 사용자 지정 사용자 계정으로 열거합니다. 공유 폴더가 현재 사용자에 대해 쓰기 가능한지 확인할 수 있습니다. 모든 사용자 또는 특정 사용자그룹 구성원에게 "쓰기"를 허용하는 디렉터리를 찾아야 할 때 많은 시간을 절약할 수 있습니다. 사용법은 다음과 같습니다: enumshares.py -t 10.10.10.0/24 -u mydomain\myuser -p Password -w -o logfile.txt 또는 enumshares.py -t...

sift

Sift Secrets ファイル共有における認証情報・機微データ露出のトリアージ。 開かれた共有が見つかったとき、問題は「このリポジトリに漏洩したキーがあるか」ではありません。「何が露出したのか、そして営業終了までに何をローテーションしなければならないのか」 です。sift はその問いに応えるために作られています: 高い再現率、高速なレビューキュー、そして目視で見つけたものが残り200件のコピーを見つけるルールになるフィードバックループです。 Python 3.11+、標準ライブラリのみ。pip install 不要、インターネット不要、ビルドステップ不要。ロックダウンされた IR...

smbclient-ng

smbclient-ngは、SMB共有を操作するための高速でユーザーフレンドリーな方法です。 !NOTE Goで書かれた新しいsmbclient-ngをチェックしてください。デフォルトでより高速で、クロスプラットフォーム対応です！ https://github.com/TheManticoreProject/smbclient-ng 機能 acls: 現在の作業ディレクトリ内のファイルとフォルダのACLを一覧表示します。構文: acls bat: ファイルの内容を整形して表示します。構文: bat bhead: ファイルの先頭n行を整形して表示します。構文: bhead btail:...

ActiveReign

ActiveReign ⚠️ Thank you for your support. This project is no longer publicly maintained. Background A while back I was challenged to write a discovery tool with Python3 that could automate the process of finding sensitive information on network file shares. After writing the entire tool with...

ShareHound

ShareHound: BloodHound OpenGraph를 사용한 네트워크 공유 권한 매핑 네트워크 공유의 액세스 권한을 BloodHound OpenGraph로 매핑하는 도구입니다. 관련 블로그 게시물 읽기: https://specterops.io/blog/2025/10/30/sharehound-an-opengraph-collector-for-network-shares/ 두 가지 구현 이 저장소에는 ShareHound의 두 가지 구현이 포함되어 있습니다. 두 구현은 SMB 공유 권한에서 BloodHound OpenGraph...

CMLoot

CMLoot CMLoot was created to easily find interesting files stored on System Center Configuration Manager SCCM/CM SMB shares. The shares are used for distributing software to Windows clients in Windows enterprise environments and can contains scripts/configuration files with passwords, certificate...

sharesniffer

sharesniffer sharesniffer는 로컬 네트워크에서 열려 있거나 닫힌 파일 공유를 찾는 네트워크 분석 도구입니다. 열려 있는 cifs 및 nfs 공유의 자동 네트워크 검색과 자동 마운트를 포함합니다. 사용 방법 로컬 네트워크에서 열려 있거나 닫힌 nfs/smb 공유가 있는 모든 호스트를 찾는 예: python sharesniffer.py 192.168.56.0/24 네트워크에서 가능한 라우터/방화벽을 제외하고 모든 호스트를 찾고, 열려 있는 nfs/smb 공유를 /mnt에 자동 마운트하는 예: python...

Security Bulletin: Multiple vulnerabilities have been addressed in IBM Aspera Shares

Summary Multiple vulnerabilities have been addressed in IBM Aspera Shares Version 1.11.5 Vulnerability Details CVEID:CVE-2026-63435 DESCRIPTION: Mail is an internet library for Ruby designed to handle email generation, parsing, and sending. Prior to 2.9.1, Mail::Utilities.qvaluedecode and...

WinShareEnum

WinShareEnum Windows 공유 열거자 다운로드 https://github.com/nccgroup/WinShareEnum/raw/master/Info/WinShareEnum.exe 로컬비도메인 네트워크의 범위에 대해 몇 개의 더미 공유를 대상으로 실행한 모습입니다. 이 도구는 주로 도메인/대규모 네트워크용으로 설계되었다는 점을 기억하세요: 옵션: 몇 가지 사항: 사용자 이름을 "."으로 지정하면 도메인 대신 로컬로 인증합니다. 즉, .\guest는 \guest를 사용하는 대신 guest 계정으로 모든 서버에 로컬...

CVE-2026-103249

n8n versions before 1.123.80, from 2.0.0 before 2.39.6, and from 2.40.0 before 2.40.1 contain a stored DOM cross-site scripting vulnerability in Resource Locator parameter dropdown link handling. Workflow authors can inject malicious script URLs that execute arbitrary JavaScript in the editor...

EUVD-2026-90643

n8n versions before 1.123.80, from 2.0.0 before 2.39.6, and from 2.40.0 before 2.40.1 contain a stored DOM cross-site scripting vulnerability in Resource Locator parameter dropdown link handling. Workflow authors can inject malicious script URLs that execute arbitrary JavaScript in the editor...

Rocky Linux 9.6 [TuxCare] Security Update: ctdb / ldb-tools / libldb / libldb-devel / libnetapi / etc (ALMALINUX9.6:CLSA-2026:1778859875)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1778859875 advisory. - A flaw was found in Samba. The smbd service daemon does not pick up group membership changes when re- authenticating an expired SMB...

AlmaLinux 9.6 [TuxCare] Security Update: ctdb / ldb-tools / libldb / libldb-devel / libnetapi / etc (ALMALINUX9.6:CLSA-2026:1778859875)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1778859875 advisory. - A flaw was found in Samba. The smbd service daemon does not pick up group membership changes when re- authenticating an expired SMB session...