CVE-2026-33829

This repository contains an automated Bash tool designed to passively and controllably audit and verify whether Windows OS assets are vulnerable to insecure manipulation of the search: protocol handler.

The script acts as a passive listener, using tcpdump to capture outgoing connection attempts under the SMB (port 445) protocol when the target interacts with a specially crafted URI.

🛠️ System Requirements

• Verification Environment (Linux): Requires superuser privileges (sudo) and the tcpdump package installed.
• Target Asset (Windows): Direct network connectivity to the verification machine.

🚀 Usage Guide

1. Preparation on the Linux Machine

Clone this repository or download the script verificar_search_uri.sh. Make sure to grant it execution permissions before starting.

# Asignar permisos de ejecución
chmod +x verificar_search_uri.sh

# Ejecutar el script indicando la interfaz local y la IP del objetivo Windows
sudo ./verificar_search_uri.sh <interfaz_red> <ip_windows>