CPLDCOMTrigger

CPLDCOMTrigger Description A Python script depends on Impacket scripts to trigger the loading of a .cpl file into memory using a DCOM object. The CPL file path must already be added to the registry. The script uses the Open function in the IOpenControlPanel interface to load the CPL Control Panel...

CVE-2025-9267

CVE-2025-9267 Description In Seagate Toolkit on Windows there is an insecure DLL-loading vulnerability in the Toolkit Installer prior to version 2.35.0.6 where the installer attempts to load DLLs from the current working directory without validating their origin or integrity. An attacker who can...

themebleed

ThemeBleed Proof-of-Concept for CVE-2023-38146 "ThemeBleed" Usage: ThemeBleed.exe Commands: server - Runs the server maketheme - Generates a .theme file referencing the specified host makethemepack - Generates a .themepack file referencing the specified host Data files The binaries in data...

CVE-2021-1675_RDL_LPE

CVE-2021-1675RDLLPE CS reflective loading plugin for PrintNightMare LPE privilege escalation vulnerability. Out-of-the-box, memory loading, obfuscated driver name loading to bypass Defender/EDR. Disclaimer: This project is only for learning and communication, please use it cautiously within a...

CVE-2020-0668

CVE-2020-0668 Make CVE-2020-0668 exploit work for version = win10 v1903 Diaghub Exploit evil.dll STEP 2：execute exp.ps1 with powershell STEP 3：execute Diaghub.exe C:\ProgramData evil.dll to load dll and add user. Diaghub UsoDllLoader Exploit = v1903 powershell exploit works on version = win10 v19...

PowerShx

SharpShx Unmanaged PowerShell execution using DLLs or a standalone executable. Introduction PowerShx is a rewrite and expansion on the PowerShdll project. PowerShx provide functionalities for bypassing AMSI and running PS Cmdlets. Features Run Powershell with DLLs using rundll32.exe,...

CVE-2021-40444

Fully Weaponized CVE-2021-40444 Malicious docx generator to exploit CVE-2021-40444 Microsoft Office Word Remote Code Execution, works with arbitrary DLL files. Update 31/05/2022 - CVE-2022-30190 - Follina Now the generator is able to generate the document required to exploit also the "Follina"...

CPLDCOMTrigger

CPLDCOMTrigger Description A Python script depends on Impacket scripts to trigger the loading of a .cpl file into memory using a DCOM object. The CPL file path must already be added to the registry. The script uses the Open function in the IOpenControlPanel interface to load the CPL Control Panel...

CVE-2024-28589

CVE-2024-28589 A vulnerability has been discovered in Axigen Mail Server for Windows, affecting all versions up to 10.5.18, which allows for local privilege escalation. Description: The Axigen Mail Server was found to be vulnerable to a local privilege escalation due to insecure DLL loading from ...

CVE-2020-24972

So CVE-2020-24972 spans from another cve in actually. I don't remember the cve that got designated but it has to do with platformpluginpath cmdline option from qt. So in essence the problem comes from using qt, persee the option platformpluginpath . "This parameter is supposed to contain a...

CVE-2021-40444

CVE-2021-40444 PoC Malicious docx generator to exploit CVE-2021-40444 Microsoft Office Word Remote Code Execution Creation of this Script is based on some reverse engineering over the sample used in-the-wild: 938545f7bbe40738908a95da8cdeabb2a11ce2ca36b0f6a74deda9378d380a52 docx file You need to...

CVE-2021-1675-PrintNightmare

CVE-2021-1675-PrintNightmare Working PowerShell POC Powershell script is copied from https://github.com/calebstewart/CVE-2021-1675 Respect for Caleb Stewart and John Hammond. I just wanted to have working poc close at hand. Ive added my custom DLL and an obfuscated version of powershell script...

PythonMemoryModule

PythonMemoryModule pure-python implementation of MemoryModule technique to load a dll or unmanaged exe entirely from memory "Python memory module" AI generated pic - hotpot.ai What is it PythonMemoryModule is a Python ctypes porting of the MemoryModule technique originally published by Joachim...

CVE-2021-40444

CVE-2021-40444 PoC Malicious docx generator to exploit CVE-2021-40444 Microsoft Office Word Remote Code Execution Creation of this Script is based on some reverse engineering over the sample used in-the-wild: 938545f7bbe40738908a95da8cdeabb2a11ce2ca36b0f6a74deda9378d380a52 docx file You need to...

SharpPN

C PrintNightmare CVE-2021-1675 You'll need a DLL to use SharpPN. So once you have that, just build and specify the dll path in the command-line arguments. Build You can build yourself with C:\Windows\Microsoft.NET\Framework64\v3.5\csc.exe -out:SharpPN.exe C:\Path\to\Program.cs or by opening the...

CVE-2021-1675-LPE-EXP

CVE-2021-1675-LPE-EXP Simple LPE Exploit of CVE-2021-1675 Usage CVE-2021-1675-LPE.exe C:\test\MyPigDLL.dll MyPigDLL.dll,is a test DLL which will create C:\test.txt if succeed Notice 1. Add EnumPrinterDriversW for get pDriverPath, so We dont need change the "hardcode Driver path" everytime 2. Dont...

DarkLoadLibrary

DarkLoadLibrary LoadLibrary для наступательных операций. Как это работает? https://www.mdsec.co.uk/2021/06/bypassing-image-load-kernel-callbacks/ Использование DARKMODULE DarkModule = DarkLoadLibrary LOADLOCALFILE, // control flags L"TestDLL.dll", // local dll path, if loading from disk NULL, //...

exe_to_dll

EXEtoDLL Convertit un EXE afin qu'il puisse être chargé comme une DLL. Prend en charge les DLL 32 et 64 bits Inspiré par l'idée de@guywhataguy. En savoir plus ici. Téléchargement Les versions stables sont disponibles dans releases. Les versions de test peuvent être téléchargées depuis le serveur ...

LdrLibraryEx

LdrLibraryEx DLL을 메모리에 로드하기 위한 작은 x64 라이브러리입니다. Features 낮은 의존성 및 함수 사용 ntdll.dll만 사용 위치 독립 코드 가볍고 최소한 사용하기 쉬움 메모리에서 모듈 로드 디스크에서 모듈 로드 API 세트 지원 이미지 로드 콜백 우회 프라이빗 메모리 사용 지연 가져오기, TLS, SEH 등이 포함된 이미지 지원 Documentation Library Flags 플래그는 조합할 수 있습니다. LIBRARYEXNONE: 디스크에서 모듈을 메모리로 매핑하고 엔트리포인트를 실행합니다...

CVE-2024-38077

CVE-2024-38077-EXP Fixed code based on pseudocode. Scope EXP: Windows Server 2025 POC: 08-25 Usage options: -h, --help show this help message and exit --targetip TARGETIP Target IP, eg: 192.168.120.1 --evilip EVILIP Evil IP, eg: 192.168.120.2 --evildllpath EVILDLLPATH Evil dll path, eg:...