windows_hardening

HardeningKitty and Windows Hardening Introduction The project started as a simple hardening list for Windows 10. After some time, HardeningKitty was created to simplify the hardening of Windows. Now, HardeningKitty supports guidelines from Microsoft, CIS Benchmarks, DoD STIG and BSI SiSyPHuS Win1...

YellowKey-Bitlocker-CVE-2026-45585

🛡️ YellowKey-Bitlocker-CVE-2026-45585 - Recover Your BitLocker Keys Safely 📋 What This Software Does YellowKey is a free open-source utility for Windows 10 and Windows 11. It helps you extract, backup, and view your BitLocker recovery keys. This is useful if you lost access to your encrypted drive...

Blue-Team-Notes

Blue Team Notes A collection of one-liners, small scripts, and some useful tips for blue team work. I've included screenshots where possible so you know what you're getting. Contact me If you see a mistake, or have an easier way to run a command then you're welcome to hit me up on Twitter or comm...

CVE-2026-49176_LPE_POC

CVE-2026-49176 SYSTEM Shell PoC Local privilege-escalation proof of concept for the Windows WalletService vulnerability fixed in July 2026. Technical write-up: CVE-2026-49176 Exploit Development: WalletService to SYSTEM. A standard user creates a Wallet ESE database containing a persisted callbac...

PCLink

PCLink Server The secure backbone for your personal PC remote control ecosystem. PCLink is a modern, web-first server designed for secure remote PC management and high-performance screen streaming. Featuring a high-performance FastAPI backend, a responsive Web UI, and an extensible plugin system...

Detours

Пакет Microsoft Research Detours Detours — это программный пакет для мониторинга и инструментирования вызовов API в Windows. Detours используется многими независимыми поставщиками ПО ISV, а также продуктовыми командами Microsoft. Теперь Detours доступен под стандартной лицензией с открытым исходн...

CVE-2019-0232

CVE-2019-0232 Эксплойт Удалённое выполнение кода RCE в CGI сервлете – Apache Tomcat на Windows Ссылка : https://wwws.nightwatchcybersecurity.com/2019/04/30/remote-code-execution-rce-in-cgi-servlet-apache-tomcat-on-windows-cve-2019-0232/ root@kitploit: Apache Tomcat содержит уязвимость в CGI...

CVE-2020-16899

CVE-2020-16899 : Vulnérabilité de déni de service TCP/IP de Microsoft Windows Score CVSS: 7.5 Vecteur CVSS: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C Aperçu Le 13 octobre, Microsoft a annoncé une vulnérabilité critique dans la pile IPv6 de Windows, qui permet à un attaquant...

xc

XC Shell inversé similaire à Netcat pour Linux et Windows. Fonctionnalités Windows root@kitploit: Usage: └ Commandes partagées : !exit !upload télécharge un fichier vers la cible !download télécharge un fichier depuis la cible !lfwd transfert de port local comme ssh -L !rfwd transfert de port...

xc

XC Netcat like reverse shell for Linux & Windows. Features Windows root@kitploit: Usage: └ Shared Commands: !exit !upload uploads a file to the target !download downloads a file from the target !lfwd local portforwarding like ssh -L !rfwd remote portforwarding like ssh -R !lsfwd lists active...

CVE-2025-24071

보안 취약점 보고서: CVE-2025-24071 - Windows 파일 탐색기 스푸핑 취약점 개요 NSFOCUS CERT는 Microsoft가 최근 Windows 파일 탐색기의 심각한 스푸핑 취약점CVE-2025-24071을 해결하기 위한 보안 업데이트를 발표했음을 확인했습니다. 이 취약점은 CVSS 점수 7.5로 그 심각성을 나타냅니다. 이 문제는 Windows 탐색기에서 .library-ms 파일을 암시적으로 신뢰하고 자동으로 구문 분석하는 동작에서 발생합니다. 인증되지 않은 공격자는 악성 SMB 경로를 포함하는 RAR/Z...

CVE-2019-0708

CVE-2019-0708 - BlueKeep RDP Séquence de connexion RDP : https://docs.microsoft.com/en-us/openspecs/windowsprotocols/ms-rdpbcgr/023f1e69-cfe8-4ee6-9ee0-7e759fb4e4ee Analyse de la vulnérabilité du service RDP :...

shepard

SHEPARD BITS 이 도구는 Windows BITSBackground Intelligent Transfer Service를 활용한 지속성 유지 도구입니다. 기능 파일 다운로드, 파일 유출, 파일 다운로드 + 지속적 실행 사용법 shepard.exe를 관리자 권한으로 실행하고 다음 명령줄 인자를 사용합니다: -d : 선택한 로컬 경로로 일반 파일 다운로드 -e : 선택한 로컬 경로에서 일반 파일 업로드 IIS 서버로만 전송 가능, 이는 BITS의 제한사항입니다 -dr optionalFileArgs : 선택한 경로로 파일...

shepard

SHEPARD BITS This is a persistance tool using Windows Background Intelligent Transfer Service BITS. Functionality File Download, File Exfiltration, File Download + Persistent Execution Usage Run shepard.exe as Administrator with the following command line arguments: -d : regular file download to ...

Get-AppLockerEventlog

Get-AppLockerEventlog DESCRIPTION Ce script analyse tous les canaux d'événements du journal des événements Windows pour extraire tous les logs relatifs à AppLocker. Il rassemble toutes les informations importantes liées aux événements à des fins de forensique, de threat hunting ou même de...

CVE-2023-28252-Compiled-exe

CVE-2023-28252-Compiled-exe Une modification de l'excellent exploit d'élévation de privilèges CVE-2023-2852 de Fortra. Fonctionne sur Windows 11 21H2 avec clfs.sys version 10.0.22000.1574 - fonctionne également sur Windows 10 21H2, Windows 10 22H2, Windows 11 22H2 et Windows Server 2022. Cette...

bLaCk-eye-RSA-Attacking-Toolkit-v0.1f-compiled

bLaCk-eye RSA Attacking Toolkit v0.1f Описание RAT v0.1f скомпилирован для Windows Поскольку с официального сайта можно скачать только исходники и никакого исполняемого файла. Если у вас нет времени возиться с компилятором и библиотекой miracl, всё готово к использованию...

hyperv_local_dos_poc

Hyper-V DoS PoC. Это файлы кода драйверного проекта Visual Studio 2019. 1. Скомпилируйте драйвер. 2. Включите вложенную виртуализацию для гостевой ОС с помощью команды: root@kitploit: Set-VMProcessor -VMName -ExposeVirtualizationExtensions $true 3. Запустите драйвер внутри гостевой ОС. Хостовая О...

afot

Automation FOrensics Tool The Automation FOrensics Tool AFOT is an automation tool build in Python and used for Windows Forensics in order to combine the following tools: AnalyzePESig http://didierstevens.com/files/software/AnalyzePESigV0002.zip National Software Reference Library reduced set...

CVE-2024-4577-RCE

PHP CGI Argument Injection CVE-2024-4577 RCE 📜 Описание В версиях PHP 8.1. до 8.1.29, 8.2. до 8.2.20, 8.3. до 8.3.8 при использовании Apache и PHP-CGI в Windows, если система настроена на использование определённых кодовых страниц, Windows может применять поведение «Best-Fit» для замены символов ...