7053 matches found
DanderSpritz_lab
DanderSpritz ラボ 目的 DanderSpritz ラボの目的は、研究者や防御者が、完全に機能するバージョンの DanderSpritz（Equation Group のポストエクスプロイテーションツールセット）と、ターゲットとしての Windows Server 2008 ドメインおよびクライアントを迅速に立ち上げられるようにすることです。Windows ターゲットには、DanderSpritz とその機能を調査する際に有用だと私が判断したリバースエンジニアリングツールがいくつか含まれています。 DanderSpritz ラボについて詳しくはこちらをご覧ください:...
CVE-2020-0796
CVE-2020-0796 SMBv3 の RCE 脆弱性 windows 10 は脆弱です。 Windows 2008 脆弱ではありません。 検出スクリプト...
ms09-050-CVE-2009-3103-exploit
MS09-050 SMBv2 Exploit Wrapper One-liner setup for MS09-050 CVE-2009-3103 exploitation. No fuss, no debugging, just works. Why? Most MS09-050 scripts floating around require manual shellcode injection, have timing issues with handlers, or just don't work. This wrapper: Generates shellcode with...
Explotacion-RCE-Pentesting-BlueKeep-CVE-2019-0708-
在受控环境中利用 BlueKeep 漏洞（CVE-2019-0708） 本项目为学术性质，专注于在 Windows Server 2008 R2 的 RDP 服务中利用 BlueKeep（CVE-2019-0708） 漏洞期间的分析、执行与故障排查，为 Instituto Profesional Los Leones 的网络安全课程所开发。 目标 展示在虚拟化环境中从使用 Nmap 进行初步侦察，到通过 Metasploit/Meterpreter 提权并与目标系统交互的完整渗透测试流程。 环境与工具 攻击机： Kali Linux x64 受害机： Windows Server 200...
Exploit for CVE-2017-0144
💀 EternalBlue MS17-010 Exploitation Research Controlled r...
KB5061195: Windows Server 2008 R2 OOB Security Update (May 2025) (CVE-2025-32709)
The remote Windows host is missing a security update and is therefore affected by an elevation of privilege vulnerability: - Null pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. CVE-2025-32709 Note that Nessus has n...
KB5061197: Windows Server 2008 OOB Security Update (May 2025) (CVE-2025-32709)
The remote Windows host is missing a security update and is therefore affected by an elevation of privilege vulnerability: - Null pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. CVE-2025-32709 Note that Nessus has n...
comp5003-sweeny-pentest
COMP5003: Sweeny Barbers Penetration Test Full ethical hackin...
KB5075944: Cumulative security update for Internet Explorer: February 10, 2026
None None...
January 13, 2026—KB5073697 (Monthly Rollup)
None None...
January 13, 2026—KB5073700 (Security-only update)
None None...
Microsoft Windows Cloud Files Mini Filter Driver 安全漏洞
Microsoft Windows Cloud Files Mini Filter Driver is a cloud file filter driver from Microsoft USA. An elevation of privilege vulnerability exists in Microsoft Windows Cloud Files Mini Filter Driver, which can be exploited by an attacker to elevate privileges...
Microsoft Windows Local Security Authority Subsystem Service 代码问题漏洞
The Microsoft Windows Local Security Authority Subsystem Service is an internal Microsoft program that runs Windows system security policies. It authenticates users when they log on to a computer standalone or server, manages user password changes, and generates access characters. It also leaves...
Microsoft HTTP.sys 访问控制错误漏洞
Microsoft HTTP.sys is an HTTP application protocol from Microsoft Corporation USA. An access control error vulnerability exists in Microsoft HTTP.sys. An attacker could exploit the vulnerability to elevate privileges. The following products and versions are affected:Windows 10 Version 21H2 for...
Microsoft Windows Network Driver Interface Specification 缓冲区错误漏洞
The Microsoft Windows Network Driver Interface Specification is one of the core components of a Windows network architecture from Microsoft Corporation. A buffer error vulnerability exists in the Microsoft Windows Network Driver Interface Specification. An attacker could exploit this vulnerabilit...
December 18, 2025—KB5074979 (Monthly Rollup) Out-of-band
None None...
December 9, 2025—KB5071507 (Security-only update)
None None...
November 11, 2025—KB5068904 (Monthly Rollup)
None None...