CVE-2023-36899

CVE-2023-36899 CVE-2023-36899 कमज़ोरी के लिए पुनरुत्पादन वातावरण और उपकरण, ASP.NET फ्रेमवर्क में कुकी-रहित सत्र प्रमाणीकरण बाईपास के लिए। Cookieless DuoDrop: ASP.NET फ्रेमवर्क में IIS Auth Bypass और App Pool Privesc CVE-2023-36899 आधुनिक वेब विकास में, हालाँकि सत्र ID संचारित करने के लिए कुकीज़...

Exploit-CVE-2017-6008

Exploit-CVE-2017-6008 CVE-2017-6008, HitmanPro स्कैन में एक कमजोरी है जो कर्नेल पूल बफर ओवरफ़्लो का शोषण करके विशेषाधिकार वृद्धि privilege escalation की अनुमति देती है। यहाँ दिए गए एक्सप्लॉइट्स, Tarjei Mandt के पेपर में वर्णित कोटा प्रोसेस पॉइंटर ओवरराइट हमले का उपयोग करते हैं। इसके अलावा, ये...

CVE-2023-36424

Informationen ============== Windows-Kernel-Pool clfs.sys Korruption – Privilegieneskalation. CVE-2023-36424 Dieses Repo enthält eine technische Analyse und einen funktionierenden Exploit. Autor: Nassim Asrir @p1k4l4 || https://www.linkedin.com/in/nassim-asrir-b73a57122/ Schwachstelle...

faxhell

faxhell "Fax Shell" A Proof-of-Concept bind shell using the Fax service and a DLL hijack based on Ualapi.dll. See our writeup at: https://windows-internals.com/faxing-your-way-to-system/ How to use Build Ualapi.dll and place in c:\windows\system32 Start the Fax service, which will load the DLL an...

netmap.js

netmap.js Fast browser-based network discovery module This project is no longer maintained. Description netmap.js provides browser-based host discovery and port scanning capabilities to allow you to map website visitors' networks. It's quite fast, making use of es6-promise-pool to efficiently run...

slowloris

slowloris.py - Einfacher Slowloris in Python Was ist Slowloris? Slowloris ist im Grunde ein HTTP-Denial-of-Service-Angriff, der threaded Server betrifft. Er funktioniert wie folgt: 1. Wir beginnen, viele HTTP-Anfragen zu stellen. 2. Wir senden periodisch alle 15 Sekunden Header, um die Verbindung...

AntiKernelDebug-POC

AntiKernelDebug-poc Was ist das? Ein POC, der zeigt, wie man Windows-Kernel-Debugging mithilfe des Pool-Tags erkennt. Wie funktioniert dieser POC eigentlich? Fragt die Pool-Tag-Informationen des Systems ab und prüft, ob diese TagUlong == 'oIdK' entsprechen. Getestet unter Win10 1809 Kompilieren...

SecDrvPoolLeak

SecDrvPoolLeak - Una PoC per CVE-2018-7250 Descrizione È stato scoperto un problema in secdrv.sys così come distribuito in Microsoft Windows Vista, Windows 7, Windows 8 e Windows 8.1 precedenti a KB3086255, e come distribuito in Macrovision SafeDisc. Un'allocazione non inizializzata del pool del...

hulk

Hulk DoS टूल HULK DoS टूल Python से Go भाषा में पोर्ट किया गया है। मूल Python उपयोगिता Barry Shteiman द्वारा http://www.sectorix.com/2012/05/17/hulk-web-server-dos-tool/ मैंने बस कोड को जल्दी और बिना सफाई के पोर्ट कर दिया। मूल फ़ंक्शन नाम रखे गए हैं और मूल तर्क भी अधिकतर वैसा ही रखा गया है। Pytho...

CVE-2023-28218

Report CVE-2023-28218 Panoramica del bug Errore che porta all'escalation dei privilegi nel kernel di Windows. L'errore si verifica nel driver Windows Ancillary Function Driver for WinSock AFD.sys. L'errore è stato rilasciato nella patch dell'11/04/2023. Ha un punteggio CVSS:3.1 7.0 / 6.1 ed è sta...

CVE-2024-29824

Ho apportato alcune ottimizzazioni agli script in horizon3ai in realtà, è solo l'aggiunta di un meccanismo di verifica per garantire l'accuratezza Indirizzo del progetto originale: https://github.com/horizon3ai/CVE-2024-29824 aggiunto "-f / --file" e ThreadPool...

CVE-2022-34715-POC

CVE-2022-34715-POC CVE-2022-34715-POC pcap nfssvr.sys Version 10.0.20348.825 root@kitploit: 0: kd r rax=0000000080000001 rbx=0000000000000000 rcx=ffffde87fe461150 rdx=0000000000000000 rsi=fffff8040811aa50 rdi=0000000000000008 rip=fffff80408067dbb rsp=ffffb400eb3e2630 rbp=ffffb400eb3e26b9...

CVE-2022-25262

CVE-2022-25262 PoC + dettagli sulla vulnerabilità per CVE-2022-25262 | Acquisizione della risposta SAML con un solo clic su JetBrains Hub CVE-2022-25262 Requisiti Utilizzo Come funziona? Pool di codici di autorizzazione per lo scambio "OAuth2 - SAML" Acquisizione del codice di autorizzazione OAut...

CVE-2026-50416-writeup-and-poc

CVE-2026-50416: Un QWORD di Troppo nell'Heap del Desktop Sulla build Insider di Windows 11 10.0.28020.2149, il mapping in modalità utente dell'heap del desktop Win32k esponeva un puntatore grezzo al pool della sessione kernel all'offset 0x100. La lettura in sé è quasi offensivamente piccola:...

BlackHat-Europe-2022

BlackHat-Europe-2022 Select Bugs From Binary Where Pattern Like CVE-1337-Days Abstract A revisão estática de código é uma forma eficaz de descobrir variantes de vulnerabilidades e primitivas de exploração, mas duas das tarefas mais desafiadoras para a análise estática são a extração eficaz de...

CVE-2019-0708

CVE-2019-0708-poc CVE-2019-0708 Massendetektion der Remote-Codeausführungsschwachstelle 3389hosts ist die Liste der zu prüfenden IP-Adressen, eine pro Zeile pool = ThreadPool10 ist der benutzerdefinierte Scan-Thread Hinweis Windows-Python3-Umgebung Verwendung 1. Bearbeite 3389hosts und schreibe d...

blutter

Blutter Flutter Mobile Application Reverse Engineering Tool by Compiling Dart AOT Runtime Currently the application supports only Android libapp.so arm64 only. Also the application is currently work only against recent Dart versions. For high priority missing features, see TODO Environment Setup...

CVE-2019-0708

CVE-2019-0708 BlueKeep Derzeit veröffentliche ich nur die Exploit-Notiz für Windows 7 x64. Siehe NOTE.md Hinweis: Windows 2008 R2 mit Standardkonfiguration fDisableCam=1 kann ausgenutzt werden. Die Zuverlässigkeit ist dieselbe wie bei Windows 7. Update Juli 2020 Informationen für Windows Server...

trident

trident The Trident project is an automated password spraying tool developed to meet the following requirements: the ability to be deployed on several cloud platforms/execution providers the ability to schedule spraying campaigns in accordance with a target’s account lockout policy the ability to...

trident

trident Il progetto Trident è uno strumento automatico di password spraying sviluppato per soddisfare i seguenti requisiti: la possibilità di essere distribuito su diverse piattaforme cloud/provider di esecuzione la possibilità di pianificare campagne di spraying in base alla politica di blocco...