151 matches found
KrbRelay
KrbRelay Relaying 3-headed dogs. More details at https://googleprojectzero.blogspot.com/2021/10/windows-exploitation-tricks-relaying.html and https://googleprojectzero.blogspot.com/2021/10/using-kerberos-for-authentication-relay.html This should be working on most fully patched Windows systems...
MS09-050
MS09-050 — Exploit de Ejecución Remota de Código en SMBv2 CVE-2009-3103 La Vulnerabilidad Windows Vista y Server 2008 introdujeron SMBv2 con un nuevo controlador de kernel, srv2.sys. Este controlador no valida el campo Process Id High en las solicitudes de negociación SMB. Al enviar un valor...
ms09-050-CVE-2009-3103-exploit
Contenedor de Exploit MS09-050 SMBv2 Configuración de una sola línea para la explotación de MS09-050 CVE-2009-3103. Sin complicaciones, sin depuración, simplemente funciona. ¿Por qué? La mayoría de los scripts de MS09-050 que circulan requieren inyección manual de shellcode, tienen problemas de...
zeroscan
zeroscan Zeroscan is a Domain Controller vulnerability scanner, that currently includes checks for Zerologon CVE-2020-1472, MS-PAR/MS-RPRN and SMBv2 Signing. CVE-2020-1472: Uses a built-in script to check for Zerologon CVE-2020-1472, but does NOT attempt to exploit the target, it is simply a...
Zero-day-scanning
zeroscan Zeroscan is a Domain Controller vulnerability scanner, that currently includes checks for Zerologon CVE-2020-1472, MS-PAR/MS-RPRN and SMBv2 Signing. CVE-2020-1472: Uses a built-in script to check for Zerologon CVE-2020-1472, but does NOT attempt to exploit the target, it is simply a...
EUVD-2018-17259
Malware in sbrugna...
KrbRelay - Framework For Kerberos Relaying
Relaying 3-headed dogs. More details at https://googleprojectzero.blogspot.com/2021/10/windows-exploitation-tricks-relaying.html and https://googleprojectzero.blogspot.com/2021/10/using-kerberos-for-authentication-relay.html This should be working on most fully patched Windows systems. There may ...
The vulnerability of the SMBv2 component of the Windows operating system, which allows a hacker to trigger a service failure
The vulnerability of the SMBv2 component of the Windows operating system is related to resource management errors. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
Cisco Firepower System Software Detection Engine DoS (cisco-sa-20181003-fp-smb-snort)
According to its self-reported version, Cisco FTD Software is affected by a Denial of Service DoS vulnerability within the Server Message Block Version 2 SMBv2 and Version 3 SMBv3 protocol implementation due to incorrect header validation. An an unauthenticated, remote attacker can cause the devi...
Microsoft Windows Multiple Vulnerabilities (KB4592438)
This host is missing a critical security update according to Microsoft KB4592438 SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Microsoft Windows Multiple Vulnerabilities (KB4592468)
This host is missing a critical security update according to Microsoft KB4592468 SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Microsoft Windows Multiple Vulnerabilities (KB4593226)
This host is missing a critical security update according to Microsoft KB4593226 SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Microsoft Windows Multiple Vulnerabilities (KB4592464)
This host is missing a critical security update according to Microsoft KB4592464 SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Microsoft Windows Multiple Vulnerabilities (KB4592449)
This host is missing a critical security update according to Microsoft KB4592449 SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Microsoft Windows Multiple Vulnerabilities (KB4592446)
This host is missing a critical security update according to Microsoft KB4592446 SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Microsoft Windows Multiple Vulnerabilities (KB4592471)
This host is missing a critical security update according to Microsoft KB4592471 SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Microsoft Windows Multiple Vulnerabilities (KB4592484)
This host is missing a critical security update according to Microsoft KB4592484 SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Microsoft Windows SMB Server Information Disclosure (CVE-2020-17140)
An information disclosure vulnerability has been reported in the SMBv2 component of Microsoft Windows SMB server. The vulnerability is due to improper handling of SMB2SETINFO messages. A remote, authenticated attacker can exploit this vulnerability by sending crafted SMBv2 messages to the target...
SMBv2 Symlink to Local File Vulnerability
SMBv2 supports symlinks on remote file systems by returning a special status code STATUSSTOPPEDONSYMLINK when a symlink is encountered on the remote share. It also returns a symlink reparse data buffer to be processed to determine where to redirect the request. While this is supported functionali...