Wynis

Wynis Solo un script de PowerShell para auditar la seguridad con las mejores prácticas en entornos Windows. Solo necesitas ejecutar el script, creará un directorio llamado: AUDITCONF%NOMBREMAQUINA%FECHA% Actualmente, los scripts son: -WynisWIN2016DC-CISv1.0: Auditoría de DC 2016 con CIS -Wynis-AD...

CVE-2019-0986

Security Research for FUN All focused on Microsoft Windows OS CVE-2019-0986 https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2019-0986 This is the PoC I've sent to Microsoft when I reported the above vulnerability This PoC exploits "User Profile Service" ProfSvc.dll. It will...

isms-builder

ISMS Builder Self-hosted Information Security Management System — open source, no cloud required 📖 Wiki — Docker-Image-Nutzung & Umgebungsvariablen, Architektur & Module, FAQ, Mitwirken DE/EN ⚠️ Security Warning: Fake repositories and copies distributing malware ISMS Builder has no packaged...

Microsoft-CVE-2021-1675

Microsoft-CVE-2021-1675 I have created a small C project that exploits vulnerability CVE-2021-1675. For more information about CVE-2021-1675, please check my blog post: https://thalpius.com/2021/07/16/windows-print-spooler-elevation-of-privilege-vulnerability-cve-2021-1675-explained Usage Microso...

CVE-2022-26810

CVE-2022-26809 RCE Exploit CVE description CVE-2022-26809 - weakness in a core Windows component RPC earned a CVSS score of 9.8 not without a reason, as the attack does not require authentication and can be executed remotely over a network, and can result in remote code execution RCE with the...

ophcrack

OPHCRACK 3.6.0 Time-Memory-Trade-Off-Crack A windows password cracker based on the faster time-memory trade-off using rainbow tables. This is an evolution of the original ophcrack 1.0 developed at EPFL http://lasecwww.epfl.ch/oechslin/projects/ophcrack Ophrack 3.6.0 comes with a Qt Graphical User...

hidden

Hidden 🇺🇦 Hidden ha sido desarrollado como una solución para tareas de ingeniería inversa e investigación. Es un controlador de Windows con una interfaz de modo de usuario que se utiliza para ocultar entornos específicos en su máquina Windows, como programas RCE instalados ej. procmon, wireshark,...

CVE-2024-1642470

Windows USB Generic Parent Driver Remote Code Execution Vulnerability CVE-2024-1642470 Overview This repository contains a proof-of-concept PoC exploit code and a detection script for the Windows USB Generic Parent Driver Remote Code Execution Vulnerability, identified as CVE-2024-1642470...

CVE-2020-0601

CVE-2020-0601 CVE-2020-0601 - A Windows Crypto Exploit...

manul

Manul Manul is a coverage-guided parallel fuzzer for open-source and black-box binaries on Windows, Linux and macOS beta written in pure Python. Quick Start root@kitploit: pip3 install psutil git clone https://github.com/mxmssh/manul cd manul mkdir in mkdir out echo "AAAAAA" in/test python3...

CVE-2023-36723

CVE-2023-36723 This is PoC for arbitrary directory creation bug in Container Manager service. This PoC is not thoroughly tested so it may not even work most of the time it was enough for msrc to confirm vulnerability. In order to exploit this vulnerability a Windows Sandbox feature have to be...

git-cveissues

DESCRIPTION vulnerabilities, CVE-2022-41903, and CVE-2022-23521, that affect versions 2.39 and older. Git for Windows was also patched to address an additional, Windows-specific issue known as CVE-2022-41953. These scripts: build distribution containers and installs the git version provided...

Chrome-Extractor

Chrome-Extractor Python script that will extract all saved passwords from your google chrome database and save it in chrome.txt Note: Windows only...

CVE-2021-21402

CVE-2021-21402 Jellyfin Arbitrary File Read Vulnerability Overview Jellyfin is a free software media system that controls and manages media and streaming. It is an alternative to Emby and Plex, delivering media from a dedicated server to end-user devices through multiple applications. Jellyfin...

ATTPwn

ATTPwn root@kitploit: / || || || | || || \ | o || || || o | | || | | ||| |||| ||| /| | | || | | | | | | | | | | | ' || | | | | | | | | | | | \ / | | | ||| || || || // ||| ATTPwn es una herramienta de seguridad informática diseñada para emular adversarios. La herramienta busca acercar la...

CVE-2019-0708

CVE-2019-0708 CVE-2019-0708 - A Win7 RDP exploit Sidenote: why?...

prefetch-hash-cracker

Cracker de Hash de Prefetch Motivación Durante el análisis forense de una máquina Windows, es posible que encuentres el nombre de un archivo prefetch eliminado. Aunque su contenido puede no ser recuperable, el nombre del archivo en sí suele ser suficiente para encontrar la ruta completa del...

prefetch-hash-cracker

Prefetch Hash Cracker Motivation During the forensic analysis of a Windows machine, you may find the name of a deleted prefetch file. While its content may not be recoverable, the filename itself is often enough to find the full path of the executable for which the prefetch file was created. Usin...

CVE-2019-0708

CVE-2019-0708 CVE-2019-0708 BlueKeep vulnerability batch scanning tool and POC. Currently only causes a blue screen. 0x01 Scanning - Windows usage: rdpscan.exe ip1-ip2 root@kitploit: .\rdpscan.exe 192.168.1.1-192.168.1.2 192.168.1.1 - VULNERABLE - CVE-2019-0708 192.168.1.2 - SAFE - CredSSP/NLA...

DumpSMBShare

Un script de Python para volcar archivos y carpetas de forma remota desde un recurso compartido SMB de Windows. Características Solo listar recursos compartidos con --list-shares. Seleccionar solo archivos con extensiones dadas con --extensions o todos los archivos. Elegir la carpeta local donde...