CVE-2023-29357

Ricreazione del PoC di SharePoint per CVE-2023-29357 in C con tanto aiuto da ChatGPT. Compilato con .Net versione 4.7.2 in Visual Studio 2017 Usare NuGet Package Manager per installare eventuali pacchetti mancanti Regole Yara per il rilevamento di seguito Uso: root@kitploit: CVE-2023-29357.exe...

Microsoft-CVE-2021-1675

Microsoft-CVE-2021-1675 Ho creato un piccolo progetto C che sfrutta la vulnerabilità CVE-2021-1675. Per maggiori informazioni su CVE-2021-1675, consulta il mio post sul blog: https://thalpius.com/2021/07/16/windows-print-spooler-elevation-of-privilege-vulnerability-cve-2021-1675-explained Uso di...

CVE-2017-0038-EXP-C-JS

CVE-2017-0038-EXP-C-JS L'analisi dettagliata della vulnerabilità e il processo di scrittura dell'Exploit sono stati pubblicati su 安全客: http://bobao.360.cn/learning/detail/3644.html Nell'Exploit C manca una printf che stampa l'array color finale; puoi aggiungerla manualmente, oppure usare...

SharpPN

C PrintNightmare CVE-2021-1675 Avrai bisogno di una DLL per utilizzare SharpPN. Quindi, una volta che ce l'hai, basta compilare e specificare il percorso della DLL negli argomenti della riga di comando. Compilazione Puoi compilare da solo con C:\Windows\Microsoft.NET\Framework64\v3.5\csc.exe...

WinboxExploit

WinboxExploit Implementação em C do BasuCert/WinboxPoC Vulnerabilidade Crítica do Winbox CVE-2018-14847 Apenas reimplementei uma solução de https://github.com/BasuCert/WinboxPoC...

cve-2025-6907

CVE‑2025‑6907 Strumento di Exploit SQLi File: exploit.c Autore: Byte Reaper Servizio Target: CODEPROJECT Tipo: Iniezione SQL 🔎 Panoramica Questo è un exploit standalone in C per iniezione SQL che mira alla vulnerabilità CVE‑2025‑6907 nel servizio CODEPROJECT. Combina diverse tecniche avanzate:...

microsoft-cve-2021-1675

!IMPORTANT "Dieses Repo ist jetzt im 'Blue Screen'-Modus – archiviert und eingefroren!" Microsoft-CVE-2021-1675 Ich habe ein kleines C-Projekt erstellt, das die Sicherheitslücke CVE-2021-1675 ausnutzt. Weitere Informationen zu CVE-2021-1675 findest du in meinem Blogbeitrag:...

CVE-2021-4034

CVE-2021-4034 root@kitploit: sudo apt install golang-go sudo apt install gccgo-go root@kitploit: grep PRETTY /etc/os-release id gcc cve-2021-4034-poc.c -o cve-2021-4034-poc ./cve-2021-4034-poc...

CVE-2026-31431_exp.c

cve-2016-31431exp.c Da der offizielle Anbieter dieses CVE keinen C-Code zur Verfügung gestellt hat, ergänzen wir hier eine Privilege-Escalation-Version des C-Codes für diese Schwachstelle...

SharpPolarBear

SharpPolarBear Questa è una versione armata per uno degli Exploit pubblicati da SandboxEscaper da qui https://github.com/SandboxEscaper/polarbearrepo. La maggior parte del codice proviene dal repository CollectorService di rasta-mouse https://github.com/rasta-mouse/CollectorService. Ho...

CVE-2023-29357-ExE

CVE-2023-29357-ExE Ricreazione del PoC di SharePoint per CVE-2023-29357 in C di LuemmelSec Utilizzo: root@kitploit: CVE-2023-29357.exe https://yoursharepoint.lol -v...

DCOMUploadExec

DCOM Upload & Execute DCOM-Lateral-Movement-POC, der die IMsiServer-Schnittstelle missbraucht https://www.deepinstinct.com/blog/forget-psexec-dcom-upload-execute-backdoor Die Projektmappe enthält 2 Projekte DCOMUploadExec - Ein C++-Projekt, das den Lateral-Movement-Angriffscode enthält...

Exploit for Incorrect Resource Transfer Between Spheres in Linux Linux_Kernel

CVE-2026-31431-CopyFail Artifacts and scripts for the CopyFai...

EUVD-2025-20407

Malicious code in bioql PyPI...

CVE-2025-24004

A physical attacker with access to the device display via USB-C can send a message to the device which triggers an unsecure copy to a buffer resulting in loss of integrity and a temporary denial-of-service for the stations until they got restarted by the watchdog...

CVE-2025-24004

A physical attacker with access to the device display via USB-C can send a message to the device which triggers an unsecure copy to a buffer resulting in loss of integrity and a temporary denial-of-service for the stations until they got restarted by the watchdog...

CVE-2023-48090

GPAC 2.3-DEV-rev617-g671976fcc-master is vulnerable to memory leaks in extractattributes mediatools/m3u8.c:329...

Microsoft Windows 7 < 10 / 2008 < 2012 (x86/x64) - Local Privilege Escalation (MS16-032)

Exploit Title: Microsoft Windows 7-10 & Server 2008-2012 - Local Privilege Escalation x32/x64 MS16-032 C Date: 2016-04-25 Author: @fdiskyou e-mail: rui at deniable.org Original exploit: https://www.exploit-db.com/exploits/39719/ All credits go to @FuzzySec C version with @FuzzySec powershell code...

ASUS infosvr Auth Bypass Command Execution

This module exploits an authentication bypass vulnerability in the infosvr service running on UDP port 9999 on various ASUS routers to execute arbitrary commands as root. This module launches the BusyBox Telnet daemon on the port specified in the TelnetPort option to gain an interactive remote...

URL Hunter - Local Buffer Overflow (DEP Bypass)

URL Hunter - Local Buffer Overflow DEP Bypass / Exploit Title: URL Hunter buffer overflow DEP Bypass Author: Ayrbyte Vendor or Software Link: Mini-stream Software Link : http://mini-stream.net/url-hunter/ Version: 3.1.2.1 Category: local Tested on: Windows XP sp 2 Code : c++ Fb : /Ayrbyte Greetz ...