js-driveby-download-CVE-2006-4777

js-driveby-download-CVE-2006-4777 client-side malware exploiting vulnerability in Internet Explorer 6.0 SP1 on Windows XP SP2. Requires no user consent and does not download any file. Shell Code Injection into RAM from JavaScript with IE on Windows XP. Fileless, drive-by-download, client side...

cve-2016-0189

CVE-2016-0189 Proof-of-Concept exploit for CVE-2016-0189 VBScript Memory Corruption in IE11 Tested on Windows 10 IE11. Write-up http://theori.io/research/cve-2016-0189 To run 1. Download support/.dll or compile .cpp for yourself and exploit/.html to a directory. 2. Serve the directory using a...

CVE-2019-1367

0x00 Background Internet Explorer is a web browser developed by Microsoft. It has a massive user base. On September 23, Microsoft released an emergency security update to fix a remote code execution vulnerability affecting Internet Explorer. Discovered by Google's Threat Analysis Group, the...

CVE-2014-4109

This crash is difficult to reproduce. The included proof of concept makes it a little easier to trigger the crashing code path. My super scientific process of checking the crash was to click on the url with one hand and press enter with the other. It usually crashes within 15 attempts. "IE=9" als...

CVE-2025-24071_PoC

CVE-2025-24071PoC CVE-2025-24071: NTLM Hash Leak via RAR/ZIP Extraction and .library-ms File Windows Explorer automatically initiates an SMB authentication request when a .library-ms file is extracted from a .rar archive, leading to NTLM hash disclosure. The user does not need to open or execute...

IE11SandboxEscapes

IE11SandboxEscapes Some example source code for fixed IE11 sandbox escapes. c James Forshaw 2014 For information purposes only. All files are licensed under GPLv3. See LICENSE for more information...

CVE-2025-24054

Windows File Explorer Zero Click NTLMv2-SSP Hash Disclosure 🎥 Demonstration POC + March 2025 Patch bypass 🎥 patch bypass Click the image above to watch the vulnerability demonstration 📋 Technical Overview This repository provides a comprehensive research framework analyzing the vulnerability chai...

POC-ES-File-Explorer-CVE-2019-6447

PoC ES File Explorer 4.1.9.7.4 CVE-2019-6447 This is a very simple implementation in bash of the CVE-2019-6447 PoC. It basically uses curl to send the requests with the right parameters. I've built it as I was looking for a similar script during a CTF and couldn't find any. You can play around wi...

CVE-2019-6447-ESfile-explorer-exploit

CVE-2019-6447-ES file Explorer exploit ES File Explorer v4.1.9.7.4 Open port vulnerability exploit. CVE-2019-6447 Credits to the one who found the actual vulnerability...

CVE-2025-24071-POC-NTLMHashDisclosure-

CVE-2025-24071-POC-NTLMHashDisclosure Triggers automatic SMB authentication to an attacker-controlled share. No interaction required — Windows Explorer initiates this NTLM authentication automatically. Results in NTLMv2 hash leakage information disclosure. Affects Windows 10/11 all versions,...

CVE-2025-24071

CVE-2025-24071PoC CVE-2025-24071: NTLM Hash Leak via RAR/ZIP Extraction and .library-ms File Windows Explorer automatically initiates an SMB authentication request when a .library-ms file is extracted from a .rar archive, leading to NTLM hash disclosure. The user does not need to open or execute...

Malicious code in block-explorer-api (RubyGems)

Source: amazon-inspector 9cfaa3470065369addbb91e3a6c2072e8add334c4d27bff95f91315aa58ae313 The gem's native-extension build script extconf.rb decodes a base64-encoded Ruby payload and passes it to eval inside a double-forked, detached child process with stdio redirected to /dev/null. The decoded...

breakcyserver

breakcyserver Full post in: https://waawaa.github.io/ 1. Kill EDR services by killing all the opened handles of the EDR process. 2. Bypass PPL by abussing some Process Explorer drivers functionalities. 3. Bypass ObRegisterCallbacks implementation by abussing Process Explorer driver...

usbhijacking

CVE-2017-8464 PoC Windows Shell in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows local users or remote attackers to execute arbitrary code via ...

CVE-2025-50154

NTLM/SMB Hardening & Threat Hunt Toolkit Author: w01f Version: 1.0 Purpose: Audit, harden, and hunt for insecure NTLM/SMB usage to mitigate risks such as CVE-2025-50154. CVE-2025-50154 Overview Severity: High Type: NTLM Credential Leak + Patch Bypass Zero-Click Affected: Windows 10/11, Windows...

evil-ssdp

Resumen Esta herramienta responde a solicitudes de descubrimiento multicast SSDP, haciéndose pasar por un dispositivo UPNP genérico. Tu dispositivo suplantado aparecerá mágicamente en el Explorador de Windows en las máquinas de tu red local. Los usuarios que sean tentados a abrir el dispositivo...

etherblob-explorer

EtherBlob Explorer Busca y extrae archivos blob en la red Ethereum usando la API de Etherscan.io. Introducción EtherBlob Explorer es una herramienta pensada para investigadores, analistas, participantes de CTF o cualquier persona curiosa que desee buscar diferentes tipos de archivos o cualquier...

Malicious code in block-explorer-api (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cfaa3470065369addbb91e3a6c2072e8add334c4d27bff95f91315aa58ae313 The gem's native-extension build script extconf.rb decodes a base64-encoded Ruby payload and passes it to eval inside a double-forked, detached child...

MAL-2026-17780 Malicious code in block-explorer-api (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cfaa3470065369addbb91e3a6c2072e8add334c4d27bff95f91315aa58ae313 The gem's native-extension build script extconf.rb decodes a base64-encoded Ruby payload and passes it to eval inside a double-forked, detached child...

noia

Noia Noia es una herramienta basada en web cuyo objetivo principal es facilitar el proceso de exploración del sandbox de aplicaciones móviles y la previsualización directa de bases de datos SQLite, imágenes y más. Desarrollada con frida.re. Ten en cuenta que no soy programador, pero probablemente...