marcostolosa/cve-2025-10230OS command injection vulnerability in Samba that received the maximum possible CVSS v3.1 score of 10.0
CVE-2025-10230 is a critical remote code execution (RCE) vulnerability that remained hidden in the Samba codebase for 13 years.
The flaw resides in the handling of WINS (Windows Internet Name Service) registration packets. When configured as a Domain Controller with wins support = yes and a script defined in wins hook, Samba fails to sanitize received NetBIOS names.
An unauthenticated attacker can send a malicious name registration packet containing shell metacharacters (e.g., command), which are passed directly to the hook script and executed with the privileges of the Samba process (usually root).
nmbd or samba binary invokes the hook script via , executing the payload.sh -cThis project is an interactive technical visualization developed in React and Tailwind CSS. Follow the steps below to run it locally on your Kali or any Linux/Mac/Windows machine.
Prerequisites
Installation
Clone the repository:
git clone https://github.com/marcostolosa/CVE-2025-10230.git
cd CVE-2025-10230
Install dependencies:
npm install
Start the development server:
npm run dev
Open the browser at the indicated link (usually http://localhost:5173).
Technologies Used
⚠️ Disclaimer
This material was developed for educational and awareness purposes. Exploiting this vulnerability on systems without authorization is illegal.
Made with 💀 by Marcos Tolosa