0xvoodoo/PoCs
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Adding CVE-2025-24071 and tweaking READMEs

Browse Source
This commit is contained in:
0xVoodoo
2025-08-19 12:38:44 -06:00
parent 81b198f31c
commit 78bdacd90d
5 changed files with 105 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
CVE-2025-24071/README.md
+20
View File
@@ -0,0 +1,20 @@
# CVE-2023-24071 - Windows Explorer NTLM Hash Disclosure
This exploit abuses the way Windows Explorer handles library files that have been extracted from an archive (.zip, .rar, etc.).
When an archive containing a library is decompressed, Explorer will automatically attempt a connection to the URL specified in the library.
This means that we can set up responder and listen for a connection back to our fake SMB server, disclosing the hash of the user who extracted the archive.
User interaction is required as the archive file must be opened for the connection to be made.
# Usage
CVE-2025-2401.py -s <attacker IP/domain> -f <output file name>
\-l <library name> Renames the library file (default mal.library-ms)
# License
GPL v3.0 - as all good software should be
Only with explicit permission from the target system owner.
Remember - don't be a skid :)