Windows10_Cumulative_Updates_PowerShell

Just use this - https://github.com/aaronparker/LatestUpdate Updates everything if ENTERPRISE or EDU Win 10. If PRO only 1809 , 1903 & 1909 are patched. Windows10CumulativeUpdatesPowerShell This powershell script can be ran on a system and will identify if a system is patched for CVE-2020-0601...

CVE-2013-3900-Remediation-Script

CVE-2013-3900 Remediation Script Define registry paths for both 32-bit and 64-bit configurations $regPaths = @ "HKLM:\Software\Microsoft\Cryptography\Wintrust\Config", "HKLM:\Software\Wow6432Node\Microsoft\Cryptography\Wintrust\Config" Function to add or update the registry key function...

Orchestrated-Powershell-for-CVE-2023-24932-en

Secure Boot Mitigation Orchestrator Script Overview This PowerShell script automates the Secure Boot mitigation steps for CVE-2023-24932 , as outlined in the Microsoft Security Guidance. It handles the entire process, including registry updates, reboots, and event log validation, to ensure your...

CVE-2021-34470scanner

CVE-2021-34470scanner A Powrshell script to scan for CVE-2021-34470...

CVE-2021-36934

CVE-2021-36934 CVE-2021-36934 PowerShell Fix This powershell script fixes CVE-2021-36934, based on the original script of Joran Slingerland https://github.com/JoranSlingerland https://github.com/JoranSlingerland/CVE-2021-36934/blob/main/CVE-2021-36934.ps1 The Powershell script will do following:...

WinRE-Fix

WinRE-Fix PowerShell script to safely move/recreate Windows Recovery Environment WinRE to a new Recovery partition. Keywords: WinRE Windows Recovery Recovery Partition reagentc KB5034441 KB5028997 CVE-2024-20666 BitLocker Windows Update Fix Partition Resize GPT UEFI 🎯 What This Script Solves This...

CVE-2023-36884-Checker

CVE-2023-36884-Checker Script to check for CVE-2023-36884 hardening https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36884 Goal This scripts checks if Microsoft hardening recommendations are properly applied. Microsoft says...

cve-2017-8529

cve-2017-8529 My CVE-2017-8529 files A PowerShell script to configure the registry fix in CVE-2017-8529...

proxynotshell-IOC-Checker

proxynotshell-IOC-Checker Powershell script used to check for IOC's for CVE-2022-41040 and CVE-2022-41082 based on community research and Microsoft: GTESC The Sec Master Double Puslar Microsoft Security Resource Center Microsoft Security Blog The script may be updated to include more IOC's as mor...

Yellowkey-mitigation

Yellowkey-mitigation.ps1 is a PowerShell script that automates the WinRE mitigation workflow described in CVE-2026-45585, adds verification after every step, and does not execute step 6 reagentc /disable + reagentc /enable if any earlier step fails. It also checks whether the required registry...

-WinVerifyTrust-Signature-Validation-CVE-2013-3900-Mitigation

CVE-2013-3900 is a remote code execution vulnerability in the way Microsoft's WinVerifyTrust function handles Windows Authenticode signature verification. This flaw allows an attacker to modify a signed executable file by adding malicious code to an unverified portion of the file without...

msxml4-remediation

MSXML 4.0 Remediation PowerShell PowerShell script to remediate security findings related to Microsoft XML Core Services MSXML 4.0 , which is unsupported and commonly flagged by vulnerability scanners. This script I made unregisters the .dll files for MSXML 4 and renames them. This remediates the...

CVE-2019-1619

CVE-2019-1619 Powershell Script to build the token needed for Authentication Bypass. I was in a pentest and found a server vulnerable to CVE-2019-1619. I couldn't leverage the metasploit module due to restricted access so I exploited it manually. I created this script to automate the building of...

CVE-2022-47966_checker

CVE-2022-47966checker Quick and dirty powershell script to look for ManageEngine CVE-2022-47966 IOCs. The script will parse requests in ME HTTP access logs. If a characteristic SAML request is found, it will attempt to decode and extract the attacker's payload. Findings are written to...

CVE-2022-29072

7-Zip CVE 2022-29072 - Powershell Detection/Mitigation The deletion of the offending CHM file is commented out. Uncommenting causes the script to forcefully delete files - use at your own risk! If submitting a PR with a new hash please provide file as well for verification...

CVE-2023-23397-Patch

CVE-2023-23397 Windows Update Patch CVE-2023-23397 powershell patch script for Windows 10 and 11 This version of the script allows you to check if your device has the most reach sent patches for the latest Microsoft exploit. if the security updates are not found using the Powershell Command...

Scan_GhostScript

ScanGhostScript Scan for GhostScript files affected to CVE-2023-36664 PowerShell is self elevating. You can run it directely via context menu...

exchange-0days-202103

exchange-0days-202103 IoC determination for exploitation of CVE-2021-26855, CVE-2021-26857, CVE-2021-26858 and CVE-2021-27065...

Exchange_IOC_Hunter

ExchangeIOCHunter Description: Hunt for IOCs in IIS Logs - CVE-2021-26855, CVE-2021-26857, CVE-2021-26858, CVE-2021-27065 Artefacts Supported: C2 IP Addresses used for scanning and exploitation File Names observed in exploitation attempts Remote Code Execution RCE Usage: powershell...

CVE-2021-36934

CVE-2021-36934 Utilisation Détection .\Get-HiveNightmareStatus.ps1 Détection pour les outils de gestion nécessitant une sortie True/False .\Get-HiveNightmareStatus.ps1 -PostureCheck Remédiation For initial SAM fixes and vss removal .\Get-HiveNightmareStatus.ps1 -Remediate Remediate even if the...