relayer

Relayer - Script de Ataque de Relevo SMB. Relayer es un script de ataque de relevo SMB que automatiza todos los pasos necesarios para escanear sistemas con firma SMB deshabilitada y retransmitir solicitudes de autenticación a estos sistemas con el objetivo de obtener una shell. Excelente al...

Tater

Tater Tater es una implementación en PowerShell del exploit de escalada de privilegios Hot Potato de Windows. Créditos Todo el crédito va para @breenmachine, @foxglovesec, Google Project Zero y cualquier otra persona que ayudó a resolver los detalles de este exploit. Potato -...

ridrelay

RidRelay Quick and easy way to get domain usernames while on an internal network. Hit me up: @skorov8 How it works RidRelay combines the NTLM Relay attack, common lsarpc based queries and RID cycling to get a list of domain usernames. It takes these steps: 1. Spins up an SMB and HTTP servers and...

smbAutoRelay

AVISO : NO SOY RESPONSABLE DEL USO INCORRECTO DE ESTA HERRAMIENTA. LA EJECUTAS BAJO TU PROPIO RIESGO. Antes de ejecutarla, asegúrate de estar en un entorno controlado y donde tengas permiso para realizar este tipo de ejercicio. POR FAVOR, SÉ AMABLE : SMB AutoRelay SMB AutoRelay proporciona la...

SharpRelay

用法 此攻击的唯一要求是拥有一个具有本地管理员 权限或能够加载驱动程序的 Beacon。使用 SharpRelay 的攻击步骤如下： 将已签名 的 WinDivert 驱动程序上传到受感染主机上的任意文件夹 运行 SharpRelay 来修改到达 445 端口的数据包的目标端口，并将其重定向到另一个端口（例如 8445） 在我们的 Beacon 上运行 Cobalt Strike 的 rportfwd 命令，将受感染主机的 8445 端口转发到我们团队服务器的 445 端口 启动一个 socks 服务器，将中继流量转发回受害者网络 使用 proxychains 运行 Impacket 的...

ExchangeRelayX

ExchangeRelayX Version 1.0.0. This tool is a PoC to demonstrate the ability of an attacker to perform an SMB or HTTP based NTLM relay attack to the EWS endpoint on an on-premise Microsoft Exchange server to compromise the mailbox of the victim. This tool provides the attacker with an OWA looking...

eaphammer

by Gabriel Ryan s0lst1c3 Current release: v1.14.1 Supports Python 3.9+. Overview EAPHammer is a toolkit for performing targeted evil twin attacks against WPA2-Enterprise networks. It is designed to be used in full scope wireless assessments and red team engagements. As such, focus is placed on...

CVE-2020-13941

CVE-2020-13941: Missbrauch von UNC-Pfaden in Windows-Umgebungen in Apache Solr Es wurde festgestellt, dass mehrere Solr-Endpunkte absolute Pfade akzeptieren. Unter Windows-Systemen können diese absoluten Pfade erzwungen werden, damit das Betriebssystem eine Verbindung zu einem...

chuckle

Chuckle - Uno script automatizzato per SMB Relay. Chuckle richiede alcuni strumenti per funzionare: SMBRelayX.py Veil ultima versione da git Responder Chuckle rileverà quale versione stai utilizzando. Nmap Nbtscan unixwiz MSFconsole L'uso dovrebbe essere abbastanza semplice, esegui come root o us...

EUVD-2026-54437

Tobit Laboratories AG TeamDavid's Webbox 's sending email, fax, SMS, etc. functionality accepts a @@INCLUDE command, which can be set to network locations using UNC paths e.g., “\Server\Share”. The server processes these paths without validation, resulting in outbound connection attempts to...

CVE-2026-26333

Calero VeraSMART versions prior to 2022 R1 expose an unauthenticated .NET Remoting HTTP service on TCP port 8001. The service publishes default ObjectURIs including EndeavorServer.rem and RemoteFileReceiver.rem and permits the use of SOAP and binary formatters with TypeFilterLevel set to Full. An...

CVE-2026-25067

SmarterTools SmarterMail versions prior to build 9518 contain an unauthenticated path coercion vulnerability in the background-of-the-day preview endpoint. The application base64-decodes attacker-supplied input and uses it as a filesystem path without validation. On Windows systems, this allows U...

EUVD-2010-2357

Malware in sbrugna...

EUVD-2016-6117

Malware in sbrugna...

EUVD-2019-18936

Malware in sbrugna...

EUVD-2015-4903

Malware in sbrugna...

EUVD-2015-4866

Malware in sbrugna...

EUVD-2022-0662

Malicious code in bioql PyPI...

EUVD-2021-8743

Malicious code in bioql PyPI...

CVE-2025-55234

SMB Server might be susceptible to relay attacks depending on the configuration. An attacker who successfully exploited these vulnerabilities could perform relay attacks and make the users subject to elevation of privilege attacks. The SMB Server already supports mechanisms for hardening against...