10523 matches found
CVE-2026-3805-curl-SMB-UAF
CVE-2026-3805: Use-After-Free in curl SMB Connection Reuse I found a use-after-free vulnerability in libcurl's SMB protocol handler. When a second SMB transfer reuses an existing connection to the same server, the file path for the new request req-path is a dangling pointer to freed heap memory...
CVE-2025-24071-POC-NTLMHashDisclosure-
CVE-2025-24071-POC-NTLMHashDisclosure Triggers automatic SMB authentication to an attacker-controlled share. No interaction required — Windows Explorer initiates this NTLM authentication automatically. Results in NTLMv2 hash leakage information disclosure. Affects Windows 10/11 all versions,...
CVE-2026-33829
CVE-2026-33829 This repository contains an automated Bash tool designed to passively and controllably audit and verify whether Windows OS assets are vulnerable to insecure manipulation of the search: protocol handler. The script acts as a passive listener, using tcpdump to capture outgoing...
The vulnerability of the `same_client_has_lease()` function in the `fs/smb/server/oplock.c` component of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the sameclienthaslease function in the fs/smb/server/oplock.c component of the Linux operating system is related to the improper implementation of thread management. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibili...
CVE-2025-50154-Aggressor-Script
LNK Weaponizer - Cobalt Strike Aggressor Script A comprehensive Cobalt Strike Aggressor script that weaponizes and executes malicious LNK files and Library-MS files for SMB NTLMv2-SSP hash disclosure. Includes CVE-2025-24054 bypass techniques. ⚠️ DISCLAIMER This tool is for educational and researc...
impacket
Impacket Copyright Fortra, LLC y sus empresas afiliadas. Todos los derechos reservados. Impacket fue creado originalmente por SecureAuth, y actualmente es mantenido por Core Security de Fortra. Impacket es una colección de clases de Python para trabajar con protocolos de red. Impacket se centra e...
EternalBlue-Vulnerability-Scanner
EternalBlue Scanner A Python tool for scanning SMB-enabled devices for the EternalBlue vulnerability CVE-2017-0144. This script checks whether devices in a network are vulnerable to the EternalBlue exploit by testing SMB connections. ⚡ Features ✅ Scans a list of IP addresses for SMB vulnerability...
CVE-2025-24071
CVE-2025-24071PoC CVE-2025-24071: NTLM Hash Leak via RAR/ZIP Extraction and .library-ms File Windows Explorer automatically initiates an SMB authentication request when a .library-ms file is extracted from a .rar archive, leading to NTLM hash disclosure. The user does not need to open or execute...
CVE-2023-23397-Report
CVE-2023-23397-Report An exploitation demo of Outlook Elevation of Privilege Vulnerability CVE-2023-23397 is a critical EoP vulnerability in Microsoft Outlook that is triggered when an attacker sends a message with an extended MAPI property with a UNC path to an SMB TCP 445 share on a threat...
CVE-2018-10583
Updated python3 exploit for CVE-2018-10583 LibreOffice/Open Office - '.odt' Information Disclosure original credits to : https://www.exploit-db.com/exploits/44564 Usage 1. Install ezodf module with pip or pip3 2. Run the exploit with python3 it will generate a bad.odt file, upload it to the box 3...
Vulnerability-Research-CVE-2017-0144
Vulnerability-Research-CVE-2017-0144 LAB: ATTACK ON WINDOWS OPERATING SYSTEM BASED ON SMB PROTOCOL VULNERABILITY. I. DESCRIPTION In this lab, we will use two computers to simulate an attack based on a vulnerability in the SMB protocol of the Windows operating system. One machine runs Kali Linux,...
SMB-CVE-2025-33073
SMB-CVE-2025-33073 Advanced SMB Honeypot: CVE-2025-33073 Research & Implementation Advanced SMB Honeypot: CVE-2025-33073 Research & Forensics 📌 Project Overview This project presents a high-interaction Honeypot environment designed to research, detect, and analyze exploitation attempts targeting...
CVE-2007-2447
CVE-2007-2447 To test the script I recommend you the virtual machine "metasploitable 2" available here. The script will display a reverse shell if the exploit works. To get the connection, just open a netcat session like : netcat -lnvp Table of contents Exemples Requirements Payloads Examples py...
OSCP
OSCP OSCP Study Guide Table of Contents Enumeration and Recon Web Enumeration Nikto scanning: nikto -h http://10.10.10.1 Directory busting with different tools: DIRB dirb http://10.10.10.1 Gobuster gobuster dir -u http://10.129.155.74:3000 -w...
CVE-2007-2447
ExploitDev Journey 6 | CVE-2007-2447 | Samba 3.0.20 3.0.25rc 'Username' map script' Command Execution Original Exploit: https://www.exploit-db.com/exploits/16320 Exploit name: Samba username map script RCE CVE : 2007-2447 Lab : Lame - HackTheBox Description There is a vulnerability in Samba...
cve-2019-1040-scanner
Escáner de CVE-2019-1040 Comprueba la vulnerabilidad CVE-2019-1040 sobre SMB. El script establecerá una conexión con el/los hosts objetivo y enviará una autenticación NTLM inválida. Si esta es aceptada, el host es vulnerable a CVE-2019-1040 y puedes ejecutar el ataque MIC Remove con ntlmrelayx. T...
CVE-2007-2447
CVE-2007-2447 Saikat Karmakar | 14 de octubre de 2022 Uso: python3 exploit-smb-3.0.20.py -lh -lp -t requisitos pysmb argparse P.D. No soy el autor de este CVE. Apenas tenía una computadora cuando se creó este CVE. Intenté crear un script automatizado para explotar CVE-2007-2447...
cve-2024-43451-ntlm_hash_disclosure_reproduction
CVE-2024-43451 — Windows NTLM Hash Disclosure Spoofing Vulnerability Overview CVE-2024-43451 is an NTLMv2 hash disclosure spoofing vulnerability in Windows. It allows an unauthenticated remote attacker to leak a victim's NTLM hash by convincing them to interact with a malicious .url shortcut file...
pipe_finder
Pipe Finder 1.0 Script automatizado para buscar en el protocolo SMB nombres de pipe disponibles Capturas de pantalla Requisitos metasploit-framework wget locate módulo pipeauditv2.rb https://github.com/peterpt/pipeauditorfb - Se instalará en la primera ejecución Requisitos de instalación apt-get...