CVE-2016-3225

Related Files

Microsoft Windows Net-NTLMv2 Reflection DCOM/RPC Privilege Escalation

Posted Jan 16, 2019

Authored by breenmachine, FoxGloveSec, decoder, phra, ohpe, lupman | Site metasploit.com

This Metasploit module utilizes the Net-NTLMv2 reflection between DCOM/RPC to achieve a SYSTEM handle for elevation of privilege. It requires a CLSID string.

tags | exploit

advisories | CVE-2016-3225

SHA-256 | 5e3f05cf275d9d2ae02e2d4ec7ec57c79e4e8a2edb6c3200d02245aa852d0dda

Download | Favorite | View

Windows Net-NTLMv2 Reflection DCOM/RPC

Posted Oct 5, 2018

Authored by Mumbai, breenmachine, FoxGloveSec | Site metasploit.com

This Metasploit module utilizes the Net-NTLMv2 reflection between DCOM/RPC to achieve a SYSTEM handle for elevation of privilege. Currently the module does not spawn as SYSTEM, however once achieving a shell, one can easily use incognito to impersonate the token.

tags | exploit, shell

advisories | CVE-2016-3225

SHA-256 | 10aca5238c09e9bf6cc039620feb2267cc144082ac9a5d8868637ad860f00b93

Download | Favorite | View

Windows Local WebDAV NTLM Reflection Elevation Of Privilege

Posted Jun 23, 2016

Authored by Google Security Research, forshaw

A default installation of Windows 7/8 can be made to perform a NTLM reflection attack through WebDAV which allows a local user to elevate privileges to local system.

tags | exploit, local

systems | linux, windows

advisories | CVE-2016-3225

SHA-256 | 38a08b6ee37889a0cd9d35ed8ee32279823b97688768df81253865add1d05bf8

Download | Favorite | View