ExchangeRelayX

ExchangeRelayX バージョン1.0.0。このツールは、攻撃者がSMBまたはHTTPベースのNTLMリレー攻撃を実行し、オンプレミスのMicrosoft ExchangeサーバーのEWSエンドポイントに対して攻撃を行い、被害者のメールボックスを侵害する能力を示すPoCです。このツールは、被害者のメールボックスと連絡先にアクセスできるOWAのようなインターフェースを攻撃者に提供します。 背景 Defcon26でリリースされました。ツールの背景、悪用される中核的な問題、および録画されたデモはこちらをご覧ください:...

SharpRelay

用法 此攻击的唯一要求是拥有一个具有本地管理员 权限或能够加载驱动程序的 Beacon。使用 SharpRelay 的攻击步骤如下： 将已签名 的 WinDivert 驱动程序上传到受感染主机上的任意文件夹 运行 SharpRelay 来修改到达 445 端口的数据包的目标端口，并将其重定向到另一个端口（例如 8445） 在我们的 Beacon 上运行 Cobalt Strike 的 rportfwd 命令，将受感染主机的 8445 端口转发到我们团队服务器的 445 端口 启动一个 socks 服务器，将中继流量转发回受害者网络 使用 proxychains 运行 Impacket 的...

relayer

Relayer - SMB中继攻击脚本 Relayer是一个SMB中继攻击脚本，可自动化扫描系统中SMB签名禁用情况，并将身份验证请求中继到这些系统，以获取shell。非常适合在执行渗透测试时使用。 Relayer利用多种工具创建和交付payload，用户可以选择最适合的方法或工具： 来自trustedsec的Unicorn，请参见 https://github.com/trustedsec/unicorn Ps1encode https://github.com/CroweCybersecurity/ps1encode 用于生成并编码基于PowerShell的metasploit...

Tater

Tater Tater 是一个利用 Hot Potato Windows 权限提升漏洞的 PowerShell 实现。 致谢 所有感谢归于 @breenmachine、@foxglovesec、Google Project Zero 以及所有帮助解决此利用细节的其他人。 Potato - https://github.com/foxglovesec/Potato 包含于 p0wnedShell - https://github.com/Cn33liz/p0wnedShell PowerShell Empire -...

eaphammer

by Gabriel Ryan s0lst1c3 Current release: v1.14.1 Supports Python 3.9+. Overview EAPHammer is a toolkit for performing targeted evil twin attacks against WPA2-Enterprise networks. It is designed to be used in full scope wireless assessments and red team engagements. As such, focus is placed on...

ridrelay

RidRelay Quick and easy way to get domain usernames while on an internal network. Hit me up: @skorov8 How it works RidRelay combines the NTLM Relay attack, common lsarpc based queries and RID cycling to get a list of domain usernames. It takes these steps: 1. Spins up an SMB and HTTP servers and...

smbAutoRelay

DISCLAIMER : I AM NOT RESPONSIBLE OF THE MISUSE OF THIS TOOL. YOU RUN IT AT YOUR OWN RISK. Before running it, make sure you are in a controlled environment, and where you are allowed to perform this kind of exercise. PLEASE BE KIND : SMB AutoRelay SMB AutoRelay provides the automation of SMB/NTLM...

CVE-2020-13941

CVE-2020-13941: Missbrauch von UNC-Pfaden in Windows-Umgebungen in Apache Solr Es wurde festgestellt, dass mehrere Solr-Endpunkte absolute Pfade akzeptieren. Unter Windows-Systemen können diese absoluten Pfade erzwungen werden, damit das Betriebssystem eine Verbindung zu einem...

chuckle

Chuckle - Uno script automatizzato per SMB Relay. Chuckle richiede alcuni strumenti per funzionare: SMBRelayX.py Veil ultima versione da git Responder Chuckle rileverà quale versione stai utilizzando. Nmap Nbtscan unixwiz MSFconsole L'uso dovrebbe essere abbastanza semplice, esegui come root o us...

EUVD-2026-54437

Tobit Laboratories AG TeamDavid's Webbox 's sending email, fax, SMS, etc. functionality accepts a @@INCLUDE command, which can be set to network locations using UNC paths e.g., “\Server\Share”. The server processes these paths without validation, resulting in outbound connection attempts to...

CVE-2026-26333

Calero VeraSMART versions prior to 2022 R1 expose an unauthenticated .NET Remoting HTTP service on TCP port 8001. The service publishes default ObjectURIs including EndeavorServer.rem and RemoteFileReceiver.rem and permits the use of SOAP and binary formatters with TypeFilterLevel set to Full. An...

CVE-2026-25067

SmarterTools SmarterMail versions prior to build 9518 contain an unauthenticated path coercion vulnerability in the background-of-the-day preview endpoint. The application base64-decodes attacker-supplied input and uses it as a filesystem path without validation. On Windows systems, this allows U...

EUVD-2010-2357

Malware in sbrugna...

EUVD-2016-6117

Malware in sbrugna...

EUVD-2019-18936

Malware in sbrugna...

EUVD-2015-4903

Malware in sbrugna...

EUVD-2015-4866

Malware in sbrugna...

EUVD-2021-8743

Malicious code in bioql PyPI...

EUVD-2022-0662

Malicious code in bioql PyPI...

CVE-2025-55234

SMB Server might be susceptible to relay attacks depending on the configuration. An attacker who successfully exploited these vulnerabilities could perform relay attacks and make the users subject to elevation of privilege attacks. The SMB Server already supports mechanisms for hardening against...