smb

SMB Um pacote Go para comunicação via SMB. Atualmente, apenas funcionalidade mínima existe para funções do lado do cliente. root@kitploit: package main import "log" "github.com/stacktitan/smb/smb" func main host := "172.16.248.192" options := smb.Options Host: host, Port: 445, User: "alice",...

Tater

Tater Tater ist eine PowerShell-Implementierung des Hot Potato Windows Privilege Escalation Exploits. Danksagung Alle Anerkennung geht an @breenmachine, @foxglovesec, Google Project Zero und alle anderen, die bei der Ausarbeitung der Details für diesen Exploit geholfen haben. Potato -...

Sharp-SMBExec

Sharp-SMBExec Una conversione nativa in C dello script PowerShell Invoke-SMBExec di Kevin Robertson. https://github.com/Kevin-Robertson/Invoke-TheHash/blob/master/Invoke-SMBExec.ps1 Realizzato per .NET 3.5 Utilizzo Sharp-SMBExec.exe hash:"hash" username:"username" domain:"domain.tld"...

CVE-2007-2447

CVE-2007-2447 🖥️ -h3x0v3rl0rd- ️⃣ CVE-2007-2447 root@kitploit: python3 smb3.0.20.py -lh localhost -lp local port -t target Errore L'errore che stai riscontrando indica che lo script Python sta cercando di importare un modulo chiamato smb, ma non è installato sul tuo sistema. Il modulo smb fa parte...

CVE-2020-0796-Scanner

Ispirato dallo script SMBGhost di ollypwn, ho scritto il mio script e l'ho condiviso. root@kitploit: import socket import binascii import sys payload =...

jackdaw

jackdaw gather gather gather What is this? Jackdaw is here to collect all information in your domain, store it in a SQL database and show you nice graphs on how your domain objects interact with each-other an how a potential attacker may exploit these interactions. It also comes with a handy...

evil-ssdp

Overview This tool responds to SSDP multicast discover requests, posing as a generic UPNP device. Your spoofed device will magically appear in Windows Explorer on machines in your local network. Users who are tempted to open the device are shown a configurable phishing page. This page can load a...

NtlmRelayToEWS

ntlmRelayToEWS Autor: Arno0x0x - @Arno0x0x ntlmRelayToEWS ist ein Werkzeug zur Durchführung von NTLM-Relay-Angriffen auf Exchange Web Services EWS. Es startet einen SMBListener auf Port 445 und einen HTTPListener auf Port 80 und wartet auf eingehende Verbindungen des Opfers. Sobald das Opfer eine...

CVE-2020-0796

CVE-2020-0796 Remote-Überlauf-POC POC zur Überprüfung auf CVE-2020-0796 / "SMBGhost" Verwendung Stellen Sie sicher, dass Python installiert ist, und führen Sie dann cve-2020-0796.py aus...

ispy

ispy ispy : Scanner e sfruttatore di Eternalbluems17-010/BluekeepCVE-2019-0708 automazione Metasploit Come installare : root@kitploit: git clone https://github.com/Cyb0r9/ispy.git cd ispy chmod +x setup.sh ./setup.sh Schermate :...

eaphammer

by Gabriel Ryan s0lst1c3 Current release: v1.14.1 Supports Python 3.9+. Overview EAPHammer is a toolkit for performing targeted evil twin attacks against WPA2-Enterprise networks. It is designed to be used in full scope wireless assessments and red team engagements. As such, focus is placed on...

SMBetray

SMBetray Version 1.0.0. This tool is a PoC to demonstrate the ability of an attacker to intercept and modify insecure SMB connections, as well as compromise some secured SMB connections if credentials are known. Background Released at Defcon26 at "SMBetray - Backdooring and Breaking Signatures" I...

SMBetray

SMBetray Versione 1.0.0. Questo strumento è un PoC per dimostrare la capacità di un attaccante di intercettare e modificare connessioni SMB non sicure, oltre a compromettere alcune connessioni SMB protette se le credenziali sono note. Contesto Presentato al Defcon26 con "SMBetray - Backdooring an...

SMBGhost-CVE-2020-0796-

CVE-2020-0796 POC per overflow remoto POC per verificare CVE-2020-0796 / "SMBGhost" Utilizzo Assicurati di avere Python installato, poi esegui cve-2020-0796.py...

ECE9069_SMBGhost_Exploit_CVE-2020-0796-

Questo repository non contiene un README...

bofhound

THIS REPO IS NO LONGER ACTIVE ⛔🚧 This repo is no longer maintained. To submit an issue, pull request, or obtain the lastest version, reference https://github.com/coffeegist/bofhound 🚧⛔ root@kitploit: | / / / | /| | | | / \ | | | | | \ | | | \ | | | | | | | | | | || | | | | | | | | | | | | | .--. ...

ridrelay

RidRelay Modo rapido e semplice per ottenere nomi utente del dominio mentre si è in una rete interna. Contattami: @skorov8 Come funziona RidRelay combina l'attacco NTLM Relay, query comuni basate su lsarpc e RID cycling per ottenere una lista di nomi utente del dominio. Esegue questi passaggi: 1...

ridrelay

RidRelay Quick and easy way to get domain usernames while on an internal network. Hit me up: @skorov8 How it works RidRelay combines the NTLM Relay attack, common lsarpc based queries and RID cycling to get a list of domain usernames. It takes these steps: 1. Spins up an SMB and HTTP servers and...

impacket

Impacket Copyright Fortra, LLC and its affiliated companies. All rights reserved. Impacket was originally created by SecureAuth, and now maintained by Fortra's Core Security. Impacket is a collection of Python classes for working with network protocols. Impacket is focused on providing low-level...

impacket

Impacket Copyright © Fortra, LLC e suas empresas afiliadas. Todos os direitos reservados. O Impacket foi originalmente criado pela SecureAuth e agora é mantido pela Core Security da Fortra. Impacket é uma coleção de classes Python para trabalhar com protocolos de rede. O Impacket é focado em...