7338 matches found
DanderSpritz_lab
DanderSpritz Lab Purpose The goal of DanderSpritz lab is to allow researchers and defenders to quickly stand up a fully functional version of DanderSpritz - The Equation Group's Post exploitation tool-set and a Windows Server 2008 Domain and client as targets. The Windows target have some reverse...
CVE-2020-0796
CVE-2020-0796 SMBv3 RCE vulnerability in SMBv3 windows 10 is vulnerable Windows 2008 Not vulnerable 检测脚本...
ms09-050-CVE-2009-3103-exploit
MS09-050 SMBv2 エクスプロイトラッパー MS09-050 CVE-2009-3103 エクスプロイトをワンライナーでセットアップ。面倒な作業もデバッグも不要で、そのまま動きます。 なぜ? 世に出回っているほとんどの MS09-050 スクリプトは、手動でのシェルコード注入が必要だったり、ハンドラとのタイミング問題があったり、単純に動作しなかったりします。このラッパーは以下のことを行います: 正しいパラメータでシェルコードを生成 エクスプロイトを自動で構築 すぐに使える Metasploit ハンドラを作成 実行すべき内容を正確に指示 時間が重要となる OSCP...
Explotacion-RCE-Pentesting-BlueKeep-CVE-2019-0708-
制御された環境における BlueKeep CVE-2019-0708 脆弱性の悪用 Windows Server 2008 R2 の RDP サービスにおける BlueKeep CVE-2019-0708 脆弱性の悪用中の分析、実行、および問題解決に焦点を当てた学術プロジェクトであり、Instituto Profesional Los Leones のサイバーセキュリティ科目のために開発されました。 目的 仮想化環境におけるペネトレーションテストの完全なフローを、Nmap による初期偵察から、Metasploit/Meterpreter...
Exploit for CVE-2026-50657
The CVE-2026-50657 Affected the CVE-2026-50657 exploit: Nese...
Exploit for CVE-2017-0144
💀 EternalBlue MS17-010 Exploitation Research Controlled r...
KB5061195: Windows Server 2008 R2 OOB Security Update (May 2025) (CVE-2025-32709)
The remote Windows host is missing a security update and is therefore affected by an elevation of privilege vulnerability: - Null pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. CVE-2025-32709 Note that Nessus has n...
KB5061197: Windows Server 2008 OOB Security Update (May 2025) (CVE-2025-32709)
The remote Windows host is missing a security update and is therefore affected by an elevation of privilege vulnerability: - Null pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. CVE-2025-32709 Note that Nessus has n...
comp5003-sweeny-pentest
COMP5003: Sweeny Barbers Penetration Test Full ethical hackin...
KB5075944: Cumulative security update for Internet Explorer: February 10, 2026
None None...
January 13, 2026—KB5073697 (Monthly Rollup)
None None...
January 13, 2026—KB5073700 (Security-only update)
None None...
Microsoft Windows Cloud Files Mini Filter Driver 安全漏洞
Microsoft Windows Cloud Files Mini Filter Driver is a cloud file filter driver from Microsoft USA. An elevation of privilege vulnerability exists in Microsoft Windows Cloud Files Mini Filter Driver, which can be exploited by an attacker to elevate privileges...
Microsoft Windows Local Security Authority Subsystem Service 代码问题漏洞
The Microsoft Windows Local Security Authority Subsystem Service is an internal Microsoft program that runs Windows system security policies. It authenticates users when they log on to a computer standalone or server, manages user password changes, and generates access characters. It also leaves...
Microsoft HTTP.sys 访问控制错误漏洞
Microsoft HTTP.sys is an HTTP application protocol from Microsoft Corporation USA. An access control error vulnerability exists in Microsoft HTTP.sys. An attacker could exploit the vulnerability to elevate privileges. The following products and versions are affected:Windows 10 Version 21H2 for...
Microsoft Windows Network Driver Interface Specification 缓冲区错误漏洞
The Microsoft Windows Network Driver Interface Specification is one of the core components of a Windows network architecture from Microsoft Corporation. A buffer error vulnerability exists in the Microsoft Windows Network Driver Interface Specification. An attacker could exploit this vulnerabilit...
December 18, 2025—KB5074979 (Monthly Rollup) Out-of-band
None None...
December 9, 2025—KB5071507 (Security-only update)
None None...