223270 matches found
pyshell2bin
pyshell2bin If you work with exploits and shellcode, you already know what shellcode is and how to deal with it. Sometimes it comes with exploits in C, Perl, Python… It usually looks like: root@kitploit: payload = b"xbfxabxd0x9ax5bxdaxc7xd9x74x24xf4x5ax2bxc9" +...
PyNightmare
PyNightmare PoC für CVE-2021-36934 auch bekannt als HiveNightmare/SeriousSAM, vollständig in Python3 geschrieben Erklärung CVE-2021-36934 ist eine kürzlich entdeckte Sicherheitslücke, die von @jonasLyk gefunden wurde. Sie ermöglicht es Nicht-Admin-Benutzern, alle Registry-Hives zu kopieren, die...
CVE-2026-36981-Kernel-EoP-PoC
CVE-2026-36981-Kernel-EoP-PoC Kernel write-what-where condition within the pwdrvio.sys kernel driver of MiniTool. Demonstrates a debugger-assisted arbitrary kernel write primitive that can be leveraged toward privilege escalation. 2026-02-09 Vendor notified 2026-03-05 Vendor acknowledged 2026-03-...
Zirconium
ZIRCONIUM ZIRCONIUM has been created to scan for Indicators of Compromise IOCs on Exchange Servers for signs of Zero-Day exploits used by HAFNIUM. ZIRCONIUM will search for: CVE-2021-26855 CVE-2021-26958 CVE-2021-26857 CVE-2021-27027065 Suspicious .dmp Files .aspnet Files Found in inetpub and...
Compiled-PoC-Binary-For-CVE-2023-28252
Compiled PoC Binary For CVE-2023-28252 The repo contains a precompiled binary which can be run on a Windows machine vulnerable to CVE-2023-28252 The precompiled binary is a slightly modified version of the PoC exploit seen in fortra's repo. The file can be run with the following arguments:...
mimikatz
mimikatz mimikatz ist ein Tool, das ich erstellt habe, um C zu lernen und ein paar Experimente mit der Windows-Sicherheit durchzuführen. Es ist mittlerweile bekannt dafür, Klartext-Passwörter, Hashes, PIN-Codes und Kerberos-Tickets aus dem Speicher zu extrahieren. mimikatz kann auch Pass-the-Hash...
cve-2018-8120
CVE-2018-8120 win7 x64 संदर्भ https://github.com/unamer/CVE-2018-8120 https://github.com/FuzzySecurity/PSKernel-Primitives...
CVE-2026-20841
CVE-2026-20841 - Windows Notepad RCE PoC for a remote code execution flaw in Windows Notepad's markdown renderer. The markdown engine does not restrict URL protocols, allowing arbitrary protocol handlers to be triggered via clickable links. Disclaimers 1. Not my discovery. Credit goes to the...
CVE-2026-21510-CVSS-8.8-Important-Windows-Shell-security-feature-bypass
CVE-2026-21510 - Windows Shell Security Feature Bypass Vulnerability Repository Title Suggestion: CVE-2026-21510-Windows-Shell-Bypass-Analysis This README provides a comprehensive overview of CVE-2026-21510 , a high-severity, actively exploited zero-day vulnerability patched by Microsoft in the...
CMD_Bypass_Assessment
CMD Bypass Method Analysis CMD Bypass Method Analysis is a PowerShell script that automatically tests CMD bypass methods on Windows systems and evaluates the results. The script checks for various CMD bypass methods and saves the results to a text file, providing security recommendations. Use To...
Check-vuln-CVE-2019-0708
CVE-2019-0708 Unauthenticated CVE-2019-0708 „BlueKeep“ Scanner PoC von @JaGoTu und @zerosum0x0. Metasploit-Modul PR: https://github.com/rapid7/metasploit-framework/pull/11869 In diesem Repository Ein Scanner-Fork von rdesktop, der erkennen kann, ob ein Host anfällig für CVE-2019-0708 Microsoft...
CVE-2026-27199-werkzeug-safe-join-bypass-PoC
CVE-2026-27199 PoC: Werkzeug safejoin Windows Device-Name Bypass Status: Publicly disclosed. Fixed in werkzeug 3.1.6. Severity: Moderate Reporter: @alimezar Advisory: GHSA-29vq-49wr-vm6x Affected Versions...
CVE-2024-21338-x64-build-
CVE-2024-21338 Local Privilege Escalation from Admin to Kernel vulnerability on Windows 10 and Windows 11 operating systems with HVCI enabled...
CVE-2021-31956-EXP
Working in WIN10 1903 Not a perfect exp https://bbs.pediy.com/thread-271140.htm...
CVE-2024-38077-RDLCheck
CVE-2024-38077-RDLCheck Detect if the RDL service is running, quickly identify affected assets Usage: Install impacket root@kitploit: git clone https://github.com/fortra/impacket.git cd impacket python3 -m pipx install . Script Usage: root@kitploit: python3 RDLCheck.py usage: RDLCheck.py -h -ip I...
cube0x0-CVE-2021-1675
CVE-2021-1675 / CVE-2021-34527 Impacket implementation of the PrintNightmare PoC originally created by Zhiniang Peng @edwardzpeng & Xuefeng Li @lxf02942370 Tested on a fully patched 2019 Domain Controller Execute malicious DLL's remote or locally Patch update Microsoft has released a patch to...
calebstewart-CVE-2021-1675
CVE-2021-1675 - PrintNightmare LPE PowerShell Caleb Stewart | John Hammond | July 1, 2021 CVE-2021-1675 is a critical remote code execution and local privilege escalation vulnerability dubbed "PrintNightmare." Proof-of-concept exploits have been released Python, C++ for the remote code execution...
HTB-Mailing-A-Complete-Walkthrough
HTB: Mailing — एक संपूर्ण वॉकथ्रू द्वारा: मुर्सलिन यदि आप HackTheBox मशीनों पर काम कर रहे हैं, तो Mailing उन बक्सों में से एक है जो वास्तव में आपको कुछ सिखाता है। इसे Easy रेटेड किया गया है, यह Windows पर चलता है, और कुछ वास्तविक दुनिया की कमजोरियों को एक साथ जोड़ता है — एक डायरेक्टरी ट्रैवर्सल, ...