cve-2026-62737-lab

CVE-2026-62737: from crash to lab-assisted SYSTEM A follow-up to the original CVE-2026-62737 writeup ExecutionContext.sys arbitrary kernel indirect call. It turns the crash PoC into a working token-swap chain that spawns cmd.exe as SYSTEM, but only in a lab where a debugger supplies addresses and...

CVE-2025-60709

🚨 EXPLOIT PoC — FOR SECURITY RESEARCH, VULNERABILITY ANALYSIS AND DEFENSIVE PURPOSES ONLY 🚨 PoC DE EXPLOIT — SOLO PARA INVESTIGACIÓN DE SEGURIDAD, ANÁLISIS DE VULNERABILIDADES Y FINES DEFENSIVOS 🌐 Idiomas / Languages 🇪🇸 Español 🇬🇧 English 🇪🇸 Documentación en Español Descripción CVE-2025-60709 es...

cve-2016-0189

CVE-2016-0189 Proof-of-Concept exploit for CVE-2016-0189 VBScript Memory Corruption in IE11 Tested on Windows 10 IE11. Write-up http://theori.io/research/cve-2016-0189 To run 1. Download support/.dll or compile .cpp for yourself and exploit/.html to a directory. 2. Serve the directory using a...

CVE-2024-45440

CVE-2024-45440 Drupal CVE-2024-45440 core/authorize.php in Drupal 11.x-dev allows Full Path Disclosure even when error logging is None if the value of hashsalt is filegetcontents of a file that does not exist. Usage python CVE-2024-45440.py Lab Deployment settings.php will replace the settings.ph...

CVE-2024-49138-POC

CVE-2024-49138-POC Proof of Concept that exploits CVE-2024-49138 in CLFS.sys. CrowdStrike detected the vulnerability actively exploited by threat actors. Tested on Windows 11 23h2. A thorough analysis is available here. Below the hash of the ntoskrnl.exe and clfs.sys that were used to test the PO...

cve-2025-24813_poc

cve-2025-24813poc cve-2025-24813 Proof-of-Concept Script Affected Versions 9.0.0.M1 = tomcat = 9.0.98 10.1.0-M1 = tomcat = 10.1.34 11.0.0-M1 = tomcat = 11.0.2 Detection Method python .\CVE-2025-24813-poc.py -u url Disclaimer This script is intended for legitimate security research and educational...

Amsi_Bypass_In_2023

Amsi Bypass on Windows 11 In 2023 Technical details can be found in the article: https://medium.com/@gustavshen/bypass-amsi-on-windows-11-75d231b2cac6 AttackAmsiOpenSession.ps1 HRESULT AmsiOpenSession in HAMSICONTEXT amsiContext, out HAMSISESSION amsiSession ; This powershell script can be used t...

Apple-Remote-Crash-Tool-CVE-2018-4407

Apple-Remote-Crash-Tool-CVE-2018-4407 Crashes any macOS High Sierra or iOS 11 device that is on the same WiFi network Just a small Tool that uses a public 'heap buffer overflow vulnerability' CVE-2018-4407 and makes it easier to exploit whole networks. Requirements MacOS Python installed Scapy...

VEN0m-Ransomware

VEN0m Ransomware https://github.com/user-attachments/assets/5a1fc9b5-a647-41f6-a152-7b9d97381adc This project demonstartes how a legit, and signed driver can be weponized to evade defenses and deploy ransomware simulating a real cyberattack. 🚨 Tested on Windows 11 Pro 24H2. Fully undetectable as ...

CVE-2025-24076

CVE-2025-24076 Microsoft Windows Cross Device Service Elevation of Privilege Vulnerability Exploit Overview This script exploits a vulnerability in the Windows Cross Device Service that allows privilege escalation on Windows 11 , Windows Server 2025 , and Windows Server 2022 23H2 Server Core...

NtWarden

NtWARden Windows Analysis and Research Toolkit Windows system inspection tool built on ImGui + DirectX 11. Covers processes, services, network, kernel internals, and more - locally or over the network via WinSysServer. ⚠️ Parts of this project were vibe coded with AI assistance so it might have...

gdid-reversal

Full writeup of the Windows GDID Global Device Identifier fully reverse engineered -8a2be2 -0078d6 How Microsoft's "Global Device Identifier", the persistent Windows fingerprint named in the July 2026 Scattered Spider complaint, is actually generated, stored, and transmitted. TL;DR !NOTE Listed...

SAMDump

SAMDump Extracts Windows SAM and SYSTEM files using Volume Shadow Copy Service VSS with multiple exfiltration options and XOR obfuscation: Lists Volume Shadow Copies using VSS and creates one if necessary Extracts SAM and SYSTEM files from the Shadow Copy Uses NT API calls for file operations...

BitUnlocker

BitUnlocker Downgrade Attack A proof of concept for accessing BitLocker-encrypted disks in under 5 minutes on fully patched Windows 11 machines through a boot manager downgrade attack, leveraging the SDI vulnerability originally documented as CVE-2025-48804. The July 2025 patch fixes this in...

CVE-2023-21768-AFD-for-WinSock-EoP-exploit

CVE-2023-21768-AFD-for-WinSock-EoP-exploit Analysis articles here: https://mp.weixin.qq.com/s/9W9puJltbK-xto2A1duqgQ https://www.zoemurmure.top/posts/cve202321768/ Written by myself based on Patch Tuesday - Exploit Wednesday: Pwning Windows Ancillary Function Driver for WinSock afd.sys in 24 Hour...

CoercedPotato

Coerced potato From Patate LOCAL/NETWORK SERVICE to SYSTEM by abusing SeImpersonatePrivilege on Windows 10, Windows 11 and Server 2022. For more information: https://blog.hackvens.fr/articles/CoercedPotato.html. A very quick PoooooC: .\CoercedPotato.exe -c whoami An other PoC with an interactive...

CVE-2026-41096-POC

the bug is at DnsQueryRaw function to be specific, inside DnsRawTruncateMessageForUdp so you need a program to call it. I could be wrong, but currently there isnt a service or default program in windows 11 that use this function, thats why i needed client.c. this repo has 2 files, client.c and...

CVE-2025-24813

Testing any tomcat version to see whether that version is vulnerable to CVE-2025-24813 This POC allow you to test any tomcat version to verify whether that version is vulnerable to CVE-2025-24813 under the vulnerable conditions, in Unix environments tested on a Ubuntu machine. Note: tested using...

CVE-2023-38146

PoC for the ThemeBleed CVE-2023-38146 exploit Windows 11 Themes Heavily inspired by https://github.com/gabe-k/themebleed which only runs on windows the reason why i decided to write this. Used modified code from the impacket smbserver.py...

Pentest-Windows

Pentest-Windows11 v3.2 The First Windows Penetration Testing Environment on Mac M Chips 中文文档 | English README 📖 Project Overview 📝 System Introduction This environment aims to provide a ready-to-use Windows penetration testing environment. Reposting is welcome. Please indicate the original author...