302682 matches found
CVE-2022-21882
CVE-2022-21882 Win32k Elevation Of Privileges Techniques inspired from: https://github.com/L4ys/CVE-2022-21882 https://github.com/exploitblizzard/Windows-Privilege-Escalation-CVE-2021-1732...
CVE-2020-0668
CVE-2020-0668 Make CVE-2020-0668 exploit work for version = win10 v1903 Diaghub Exploit evil.dll STEP 2：execute exp.ps1 with powershell STEP 3：execute Diaghub.exe C:\ProgramData evil.dll to load dll and add user. Diaghub UsoDllLoader Exploit = v1903 powershell exploit works on version = win10 v19...
letsdefend-cve-2024-49138-investigation
Investigación LetsDefend: CVE-2024-49138 🔍 Descripción general Investigación práctica de SOC y simulación de respuesta a incidentes utilizando LetsDefend, centrada en la explotación real de CVE-2024-49138 , una vulnerabilidad de escalada de privilegios en el controlador CLFS de Windows. 📅 Detalle...
CVE-2025-66678
CVE-2025-66678 In Hardware Read & Write Utility v1.25.11.26, the driver exposed abritrary MSR read and write, as well as phsyical memory read and write through MmMapIoSpace, both of which enable kernel code execution. PoC Detail The PoC will swap the primary token of the current process to become...
CVE-2022-0847
CVE-2022-0847 my personal poc and exploit of CVE-2022-0847dirty pipe Usage POC: write files arbitrarily Just a simply POC of this CVE, compile the file poc.c as follow: root@kitploit: $ gcc poc.c -o poc -static You shall run it as follow: root@kitploit: ./poc targetfile offsetinfile data You shal...
goLoL
goLoL goLoL is a Windows host scanner with dual support for LOLBAS binaries and LOLDrivers. It lists LOLBAS techniques runnable at your current privilege level with MITRE ATT&CK mappings and can scan local .sys files for vulnerable/malicious LOLDrivers hash matches. Note: This is not an OPSEC saf...
BackupOperatorToDA
From Backup Operator To Domain Admin If you compromise an account member of the group Backup Operators you can become the Domain Admin without RDP or WinRM on the Domain Controller. All credit from filipdragovic with his inital POC ! I build this project because I wanted to have a more generic...
CVE-2025-54918-POC
CVE-2025-54918 – Proof of Concept PoC ⚠️ Important Notice IMPORTANT: To test CVE-2025-54918 , you must create a DNS record in the target Active Directory environment. Always consult with the client and obtain explicit authorization before testing, as this can impact DNS and authentication behavior...
Auto-Elevate
Auto-Elevate This tool demonstrates the power of UAC bypasses and built-in features of Windows. This utility auto-locates winlogon.exe, steals and impersonates it's process TOKEN, and spawns a new SYSTEM-level process with the stolen token. Combined with UAC bypass method 41 ICMLuaUtil UAC bypass...
CVE-2025-2563
CVE-2025-2563 — User Registration & Membership | Full-Chain Admin Escalation root@kitploit: ██╗ ██╗███████╗███████╗██████╗ ██████╗ ███████╗ ██████╗ ██║ ██║██╔════╝██╔════╝██╔══██╗ ██╔══██╗██╔════╝██╔════╝ ██║ ██║███████╗█████╗ ██████╔╝ ██████╔╝█████╗ ██║ ███╗ ██║ ██║╚════██║██╔══╝ ██╔══██╗...
CVE-2025-68921
CVE-2025-68921 A local privilege escalation vulnerability exists in Nahimic, an audio enhancement software pre-installed on many gaming laptops. The issue allows a low-privileged user to escalate privileges to NT AUTHORITY\SYSTEM . This vulnerability was reported to Lenovo PSIRT, tracked as...
WHOREPRESS
Wordpress login checker Install root@kitploit: npm install --global whorepress Usage make sure you have a list with format url:username:pass root@kitploit: whorepress list.txt Arguments list Arguments| Description ---|--- --admin-only| check only for admin priviledge --debug| debug error output...
Web-Penetration-Test
Web-Penetration-Test Explotando vulnerabilidades de WordPress CVE-2025-34077, bypass de autenticación mediante inyección de cookies y escalada de privilegios a root. Parte de mi Especialización en Ciberseguridad. Día 1: Hackeando mi primer sitio web Informe de laboratorio: Explotando el servidor...
refreshing-mcp-tool
Esto no está realmente terminado ni listo aún, pero quería dejar el código subido al repositorio. Esto básicamente implementa el protocolo de base de datos de F5, «mcp», que opera a través de un socket de dominio UNIX. Eso significa que necesitas un shell en el dispositivo F5 antes de poder usar...
CVE-2025-0087-
CVE-2025-0087- CVE-2025-0087 EoP full PoC...
rootsh
rootsh rootsh is a local privilege escalation targeting OS X Yosemite 10.10.5 build 14F27. It exploits CVE-2016-1758 and CVE-2016-1828, two vulnerabilities in XNU that were patched in OS X El Capitan 10.11.4 and 10.11.5. rootsh will not work on platforms with SMAP enabled. CVE-2016-1758...
ShimMe
ShimMe Herramientas de la charla DEFCON 32 "SHIM me what you got - Manipulando Shim y Office para inyección de código" Office Injector - Invoca un método RPC en el servicio OfficeClickToRun que inyecta una DLL en un proceso suspendido que se ejecuta como NT AUTHORITY\SYSTEM lanzado por el servici...
vScalation-CVE-2021-22015
vScalation CVE-2021-22015 Escalada de Privilegios Local en VMWare vCenter El grupo de investigación de Pentera descubrió una vulnerabilidad en el programa vCenter Server de VMWare que afecta al software de VMWare instalado en 500,000 organizaciones en todo el mundo, responsables de gestionar sus...
Linux-Privilege-Escalation-CVE-2025-27591
CVE-2025-27591 - Privilege Escalation via Writable Symlink in below Summary This is a simple exploit for CVE-2025-27591 , a local privilege escalation vulnerability in the below Linux system monitoring tool. The vulnerability affects versions prior to v0.9.0 and stems from incorrect permission...