302688 matches found
CVE-2022-0847
CVE-2022-0847 my personal poc and exploit of CVE-2022-0847dirty pipe Usage POC: write files arbitrarily Just a simply POC of this CVE, compile the file poc.c as follow: root@kitploit: $ gcc poc.c -o poc -static You shall run it as follow: root@kitploit: ./poc targetfile offsetinfile data You shal...
goLoL
goLoL goLoL is a Windows host scanner with dual support for LOLBAS binaries and LOLDrivers. It lists LOLBAS techniques runnable at your current privilege level with MITRE ATT&CK mappings and can scan local .sys files for vulnerable/malicious LOLDrivers hash matches. Note: This is not an OPSEC saf...
BackupOperatorToDA
From Backup Operator To Domain Admin If you compromise an account member of the group Backup Operators you can become the Domain Admin without RDP or WinRM on the Domain Controller. All credit from filipdragovic with his inital POC ! I build this project because I wanted to have a more generic...
CVE-2025-54918-POC
CVE-2025-54918 – Proof of Concept PoC ⚠️ Important Notice IMPORTANT: To test CVE-2025-54918 , you must create a DNS record in the target Active Directory environment. Always consult with the client and obtain explicit authorization before testing, as this can impact DNS and authentication behavior...
Auto-Elevate
Auto-Elevate This tool demonstrates the power of UAC bypasses and built-in features of Windows. This utility auto-locates winlogon.exe, steals and impersonates it's process TOKEN, and spawns a new SYSTEM-level process with the stolen token. Combined with UAC bypass method 41 ICMLuaUtil UAC bypass...
CVE-2025-2563
CVE-2025-2563 — User Registration & Membership | Full-Chain Admin Escalation root@kitploit: ██╗ ██╗███████╗███████╗██████╗ ██████╗ ███████╗ ██████╗ ██║ ██║██╔════╝██╔════╝██╔══██╗ ██╔══██╗██╔════╝██╔════╝ ██║ ██║███████╗█████╗ ██████╔╝ ██████╔╝█████╗ ██║ ███╗ ██║ ██║╚════██║██╔══╝ ██╔══██╗...
CVE-2025-68921
CVE-2025-68921 A local privilege escalation vulnerability exists in Nahimic, an audio enhancement software pre-installed on many gaming laptops. The issue allows a low-privileged user to escalate privileges to NT AUTHORITY\SYSTEM . This vulnerability was reported to Lenovo PSIRT, tracked as...
WHOREPRESS
Wordpress login checker Install root@kitploit: npm install --global whorepress Usage make sure you have a list with format url:username:pass root@kitploit: whorepress list.txt Arguments list Arguments| Description ---|--- --admin-only| check only for admin priviledge --debug| debug error output...
Web-Penetration-Test
Web-Penetration-Test Explotando vulnerabilidades de WordPress CVE-2025-34077, bypass de autenticación mediante inyección de cookies y escalada de privilegios a root. Parte de mi Especialización en Ciberseguridad. Día 1: Hackeando mi primer sitio web Informe de laboratorio: Explotando el servidor...
refreshing-mcp-tool
Esto no está realmente terminado ni listo aún, pero quería dejar el código subido al repositorio. Esto básicamente implementa el protocolo de base de datos de F5, «mcp», que opera a través de un socket de dominio UNIX. Eso significa que necesitas un shell en el dispositivo F5 antes de poder usar...
CVE-2025-0087-
CVE-2025-0087- CVE-2025-0087 EoP full PoC...
rootsh
rootsh rootsh is a local privilege escalation targeting OS X Yosemite 10.10.5 build 14F27. It exploits CVE-2016-1758 and CVE-2016-1828, two vulnerabilities in XNU that were patched in OS X El Capitan 10.11.4 and 10.11.5. rootsh will not work on platforms with SMAP enabled. CVE-2016-1758...
ShimMe
ShimMe Herramientas de la charla DEFCON 32 "SHIM me what you got - Manipulando Shim y Office para inyección de código" Office Injector - Invoca un método RPC en el servicio OfficeClickToRun que inyecta una DLL en un proceso suspendido que se ejecuta como NT AUTHORITY\SYSTEM lanzado por el servici...
vScalation-CVE-2021-22015
vScalation CVE-2021-22015 Escalada de Privilegios Local en VMWare vCenter El grupo de investigación de Pentera descubrió una vulnerabilidad en el programa vCenter Server de VMWare que afecta al software de VMWare instalado en 500,000 organizaciones en todo el mundo, responsables de gestionar sus...
Linux-Privilege-Escalation-CVE-2025-27591
CVE-2025-27591 - Privilege Escalation via Writable Symlink in below Summary This is a simple exploit for CVE-2025-27591 , a local privilege escalation vulnerability in the below Linux system monitoring tool. The vulnerability affects versions prior to v0.9.0 and stems from incorrect permission...
Tokenizer
NOTE This project was one of my earliest projects for learning more about Windows drivers. Please see Chaos-Rootkit for the complete version...
CVE-2020-0688
Identify Exchange Servers vulnerable to CVE-2020-0688 CVE-2020-0688 is a critical vulnerability in Microsoft Exchange due to use of static keys. Although exploitation requires valid credentials at an email user level and the risk of mass-exploitation is low, this vulnerability might be very usefu...
Hulios
Hulios Sistema endurecido de invisibilidad universal y cebolla para Linux Hulios es una puerta de enlace VPN Tor transparente para Linux impulsada por eBPF. Protege el tráfico de red saliente redirigiendo los sockets TCP y las consultas DNS a través de una instancia embebida de Arti cliente Tor y...
AD-Attack-Defense
Ataque y Defensa de la Cadena de Eliminación de Active Directory Resumen Este documento fue diseñado para ser un recurso útil e informativo para aquellos que buscan comprender las tácticas, técnicas y procedimientos TTP específicos que los atacantes aprovechan para comprometer Active Directory, a...