smb-vuln-webexec NSE Script

A critical remote code execution vulnerability exists in WebExService WebExec. See also: smb-webexec-exploit.nse Script Arguments smbdomain, smbhash, smbnoguest, smbpassword, smbtype, smbusername See the documentation for the smbauth library. randomseed, smbbasic, smbport, smbsign See the...

MS17-010 EternalBlue SMB Remote Windows Kernel Pool Corruption

This module is a port of the Equation Group ETERNALBLUE exploit, part of the FuzzBunch toolkit released by Shadow Brokers. There is a buffer overflow memmove operation in Srv!SrvOs2FeaToNt. The size is calculated in Srv!SrvOs2FeaListSizeToNt, with mathematical error where a DWORD is subtracted in...

hostmap-ip2hosts NSE Script

Finds hostnames that resolve to the target's IP address by querying the online database: http://www.ip2hosts.com Bing Search Results The script is in the "external" category because it sends target IPs to a third party in order to query their database. Script Arguments newtargets If set, add the...

ssl-known-key NSE Script

Checks whether the SSL certificate used by a host has a fingerprint that matches an included database of problematic keys. The only databases currently checked are the LittleBlackBox 0.1 database of compromised keys from various devices, some keys reportedly used by the Chinese state-sponsored...

MS Windows WRITE_ANDX SMB command handling Kernel DoS (meta)

Exploit for unknown platform in category dos / poc ============================================================ MS Windows WRITEANDX SMB command handling Kernel DoS meta ============================================================ require 'msf/core' module Msf module Exploits module Test class...

Microsoft Windows - 'WRITE_ANDX' SMB Command Handling Kernel Denial of Service (Metasploit)

require 'msf/core' module Msf module Exploits module Test class BugTest 'test exploit', 'Description' = "tests", 'Author' = 'tests', 'License' = MSFLICENSE, 'Version' = '$Revision: 0 $', 'Arch' = 'x86', 'Payload' = 'Space' = 1000 , 'Targets' = 'Windows VISTA', 'Platform' = 'win' , , 'DefaultTarge...

Powershell Remoting Remote Command Execution

This module uses Powershell Remoting TCP 47001 to inject payloads on target machines. If RHOSTS are specified, it will try to resolve the IPs to hostnames, otherwise use a HOSTFILE to supply a list of known hostnames. Module Options msf use exploit/windows/local/powershell/remoting msf...