PowerHuntShares

PowerHuntShares v2 PowerHuntShares 是一个 PowerShell 工具，旨在帮助网络安全团队和渗透测试人员更好地识别、理解、攻击和修复其保护的 Active Directory 环境中的 SMB 共享。每个黑客都有滥用 SMB 共享的故事，但网络安全团队仍然难以防御这一攻击面。该项目旨在提供一个开源的概念验证工具，用于创建全面的共享清单，利用统计、图表、图形和语言模型来情境化共享、总结关系、评估风险并优先修复。 它支持以下功能： 认证 ：使用当前用户上下文、凭据或明文用户/密码。 发现 ：自动发现与 Active Directory...

CMLoot

CMLoot CMLoot 旨在轻松查找存储在 System Center Configuration Manager SCCM/CM SMB 共享中的有趣文件。这些共享用于在企业 Windows 环境中向 Windows 客户端分发软件，可能包含带有密码、证书 pfx 等的脚本/配置文件。大多数 SCCM 部署配置为允许所有用户读取共享上的文件，有时仅限计算机账户访问。 SCCM/CM 的内容库具有“复杂”（令人头疼）的文件结构，CMLoot 将为您解开这个难题：...

smbclient-ng

smbclient-ng, una forma rápida y fácil de usar para interactuar con recursos compartidos SMB. !NOTE ¡Echa un vistazo al nuevo smbclient-ng escrito en Go, más rápido y multiplataforma por defecto! https://github.com/TheManticoreProject/smbclient-ng Características acls: Lista las ACL de archivos y...

SMBCrunch

SMBCrunch 作为红队成员，最耗时的任务之一就是深入文件系统和共享，试图识别任何潜在的敏感信息。SMBCrunch 让红队成员能够快速发现网络中的 Windows 文件共享，对提供的共享执行递归目录列表，甚至可以在远程共享中发现看似有价值的目标时抓取文件。 有三个 3 不同的工具协同工作。请阅读以下三个部分，了解它们是如何协同工作的。 SMBHunt 给定一个文件（或 gnmap 文件），SMBHunt 会查找与提供的服务器关联的所有 Windows 文件共享（如果提供了 gnmap 文件，则只查看端口 445 开放的服务器）。如果未提供执行检查的凭据，它将检查空会话共享。...

CVE-2026-27884 NetExec vulnerable to arbitrary file write via path traversal in spider_plus module

NetExec is a network execution tool. Prior to version 1.5.1, the module spiderplus improperly creates the output file and folder path when saving files from SMB shares. It does not take into account that it is possible for Linux SMB shares to have path traversal characters such as ../ in them. An...

CVE-2026-27884 NetExec vulnerable to arbitrary file write via path traversal in spider_plus module

NetExec is a network execution tool. Prior to version 1.5.1, the module spiderplus improperly creates the output file and folder path when saving files from SMB shares. It does not take into account that it is possible for Linux SMB shares to have path traversal characters such as ../ in them. An...

CVE-2026-27884: Improper Limitation of a Pathname to a Restricted Directory

NetExec is a network execution tool. Prior to version 1.5.1, the module spiderplus improperly creates the output file and folder path when saving files from SMB shares. It does not take into account that it is possible for Linux SMB shares to have path traversal characters such as ../ in them. An...

PT-2026-22067

NetExec is a network execution tool. Prior to version 1.5.1, the module spider plus improperly creates the output file and folder path when saving files from SMB shares. It does not take into account that it is possible for Linux SMB shares to have path traversal characters such as ../ in them. A...

CVE-2019-25268

NREL BEopt 2.8.0.0 contains a DLL hijacking vulnerability that allows attackers to load arbitrary libraries by tricking users into opening application files from remote shares. Attackers can exploit insecure library loading of sdl2.dll and libegl.dll by placing malicious libraries on WebDAV or SM...

CVE-1999-0495

A remote attacker can gain access to a file system using .. dot dot when accessing SMB shares...

PT-2025-41270

Name of the Vulnerable Software and Affected Versions Dell PowerScale OneFS versions prior to 9.12.0.0 Description The software contains an authorization bypass through a user-controlled key issue. A high privileged attacker with local access could potentially exploit this to gain unauthorized...

CVE-2025-43724: Authorization Bypass Through User-Controlled Key

Dell PowerScale OneFS, versions prior to 9.12.0.0, contains an authorization bypass through user-controlled key vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability to gain unauthorized access to NFSv4 or SMB shares...

EUVD-1999-0494

Malware in sbrugna...

EUVD-2025-8921

Malicious code in bioql PyPI...

CVE-2023-22855

Kardex Mlog MCC 5.7.12+0-a203c2a213-master allows remote code execution. It spawns a web interface listening on port 8088. A user-controllable path is handed to a path-concatenation method Path.Combine from .NET without proper sanitisation. This yields the possibility of including local files, as...

CVE-2023-43505

A vulnerability has been identified in COMOS All versions. The affected application lacks proper access controls in SMB shares. This could allow an attacker to access files that the user should not have access to...

PT-2024-38897 · Unknown +1 · Opa Go Library +1

Name of the Vulnerable Software and Affected Versions: OPA for Windows versions prior to 0.68.0 Description: A SMB force-authentication vulnerability exists due to improper input validation, allowing a user to pass an arbitrary SMB share instead of a Rego file as an argument to OPA CLI or to one ...

PikaBot malware on the rise: What organizations need to know

A new type of malware is being used by ransomware gangs in their attacks, and its name is PikaBot. A relatively new trojan that emerged in early 2023, PikaBot is the apparent successor to the infamous QakBot QBot trojan that was shut down in August 2023. QBot was used by many ransomware gangs in...

CVE-2023-43505

A vulnerability has been identified in COMOS All versions. The affected application lacks proper access controls in SMB shares. This could allow an attacker to access files that the user should not have access to...

CVE-2023-43505

A vulnerability has been identified in COMOS All versions. The affected application lacks proper access controls in SMB shares. This could allow an attacker to access files that the user should not have access to...