155 matches found
relayer
Relayer - Script per attacco SMB Relay. Relayer è uno script di attacco SMB Relay che automatizza tutti i passaggi necessari per scansionare i sistemi con firma SMB disabilitata e inoltrare le richieste di autenticazione a questi sistemi con l'obiettivo di ottenere una shell. Ottimo durante i tes...
Tater
Tater Tater è un'implementazione PowerShell dell'exploit Hot Potato per l'escalation dei privilegi su Windows. Crediti Tutti i crediti vanno a @breenmachine, @foxglovesec, Google Project Zero e a chiunque altro abbia contribuito a elaborare i dettagli di questo exploit. Potato -...
ridrelay
RidRelay Quick and easy way to get domain usernames while on an internal network. Hit me up: @skorov8 How it works RidRelay combines the NTLM Relay attack, common lsarpc based queries and RID cycling to get a list of domain usernames. It takes these steps: 1. Spins up an SMB and HTTP servers and...
CVE-2020-13941
CVE-2020-13941: Missbrauch von UNC-Pfaden in Windows-Umgebungen in Apache Solr Es wurde festgestellt, dass mehrere Solr-Endpunkte absolute Pfade akzeptieren. Unter Windows-Systemen können diese absoluten Pfade erzwungen werden, damit das Betriebssystem eine Verbindung zu einem...
eaphammer
by Gabriel Ryan s0lst1c3 Current release: v1.14.1 Supports Python 3.9+. Overview EAPHammer is a toolkit for performing targeted evil twin attacks against WPA2-Enterprise networks. It is designed to be used in full scope wireless assessments and red team engagements. As such, focus is placed on...
smbAutoRelay
DICHIARAZIONE DI NON RESPONSABILITÀ : NON SONO RESPONSABILE DELL'USO IMPROPRIO DI QUESTO STRUMENTO. LO UTILIZZI A TUO RISCHIO. Prima di eseguirlo, assicurati di trovarti in un ambiente controllato e dove ti è consentito svolgere questo tipo di esercizio. PER FAVORE, SII GENTILE : SMB AutoRelay SM...
SharpRelay
Utilizzo L'unico requisito per far funzionare questo attacco è avere un beacon con privilegi di amministratore locale o con la capacità di caricare driver. L'attacco che utilizza SharpRelay funziona come segue: Caricare il driver WinDivert firmato in qualsiasi cartella sull'host compromesso...
ExchangeRelayX
ExchangeRelayX Versione 1.0.0. Questo strumento è un PoC per dimostrare la capacità di un attaccante di effettuare un attacco di relay NTLM basato su SMB o HTTP verso l'endpoint EWS su un server Microsoft Exchange on-premise per compromettere la cassetta postale della vittima. Questo strumento...
chuckle
Chuckle - Ein automatisiertes SMB-Relay-Skript. Chuckle benötigt ein paar Werkzeuge, um zu funktionieren: SMBRelayX.py Veil neueste Version von git Responder Chuckle erkennt, welche Version du verwendest. Nmap Nbtscan unixwiz MSFconsole Die Verwendung ist recht einfach: Als Root ausführen oder su...
chuckle
Chuckle - An automated SMB Relay Script. Chuckle requires a few tools to work: SMBRelayX.py Veil latest version from git Responder Chuckle will detect which version you are using. Nmap Nbtscan unixwiz MSFconsole Usuage should be fairly simple, run as root or use sudo: sudo ./chuckle.sh Wait a whi...
CVEHarvest
CVEHarvest Multi-CVE exploitation framework for Windows syste...
Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Microsoft
CVE-2025-24071 — Windows File Explorer Spoofing / NTLM Hash Di...
EUVD-2026-54437
Tobit Laboratories AG TeamDavid's Webbox 's sending email, fax, SMS, etc. functionality accepts a @@INCLUDE command, which can be set to network locations using UNC paths e.g., “\Server\Share”. The server processes these paths without validation, resulting in outbound connection attempts to...
CVE-2026-54206: Improper Input Validation
Tobit Laboratories AG TeamDavid's Webbox 's sending email, fax, SMS, etc. functionality accepts a @@INCLUDE command, which can be set to network locations using UNC paths e.g., “\Server\Share”. The server processes these paths without validation, resulting in outbound connection attempts to...
Microsoft Windows HTTP to SMB Relay
This module supports running an HTTP server which validates credentials, and then attempts to execute a relay attack against an SMB server on the configured RHOSTS hosts. If the relay succeeds, an SMB session to the target will be created. This can be used by any modules that support SMB sessions...
CVE-2026-26333
Calero VeraSMART versions prior to 2022 R1 expose an unauthenticated .NET Remoting HTTP service on TCP port 8001. The service publishes default ObjectURIs including EndeavorServer.rem and RemoteFileReceiver.rem and permits the use of SOAP and binary formatters with TypeFilterLevel set to Full. An...
CVE-2026-25067
SmarterTools SmarterMail versions prior to build 9518 contain an unauthenticated path coercion vulnerability in the background-of-the-day preview endpoint. The application base64-decodes attacker-supplied input and uses it as a filesystem path without validation. On Windows systems, this allows U...
EUVD-2019-18936
Malware in sbrugna...