CVE-2025-54918-POC

CVE-2025-54918 – 概念実証（PoC） ⚠️ 重要な注意事項 重要: CVE-2025-54918 をテストするには、ターゲットのActive Directory環境で DNSレコードを作成する必要があります 。 テスト前に必ずクライアントと相談し、明示的な許可 を得てください。これは本番環境のDNSや認証動作に影響を与える可能性があります。 このリポジトリには、低権限のドメインユーザー が NTLMリフレクションと認証強制 を悪用して ドメイン管理者レベルのアクセス に昇格する方法を示す 技術的な概念実証 が含まれています。...

CVE-2026-40369

🚨 CVE-2026-40369 - Windows 커널 권한 상승 취약점 Windows 커널 힙 기반 버퍼 오버플로우로, 로컬 공격자가NT AUTHORITY\SYSTEM 권한으로 상승할 수 있습니다. 📖 개요 CVE-2026-40369 는 Microsoft Windows 커널 구성 요소에 영향을 미치는 높은 심각도 의 권한 상승 취약점입니다. 이 취약점은 Windows 커널 내의 안전하지 않은 메모리 작업에서 비롯되며, 낮은 권한을 가진 인증된 공격자가 취약한 호스트에서 SYSTEM 수준 권한 을 획득할 수 있습니다...

ShieldBreak

ShieldBreak - Windows Defender 0day 脆弱性 Microsoft は RoguePlanet 脆弱性 CVE-2026-50656 の適切なパッチ適用に失敗しており、この PoC は完全なパッチバイパスを実証しています。 この PoC は、最新バージョンの Windows 11 25H2 +Canary チャネル と Windows Server 2025 でテストされており、成功率は 100% です。 なお、Windows 10 および対応するサーバーエディション は現在サポートされていませんが、ShieldBreak...

CVE-2025-30397---Windows-Server-2025-JScript-RCE-Use-After-Free-

CVE-2025-30397---Windows-Server-2025-JScript-RCE-Use-After-Free 通过 JScript.dll 中的释放后使用（Use-After-Free）实现远程代码执行 CVE-2025-30397 🧠 描述 本仓库包含针对 JScript 引擎（jscript.dll）中释放后使用（Use-After-Free）漏洞的概念验证（PoC）利用代码，该漏洞影响 Windows Server 2025（build 25398 及更早版本）。该漏洞通过堆喷射技术利用内存破坏，可实现远程代码执行。该 PoC 演示了在受影响系统上通过...

badsuccessor

BadSuccessor.py Windows Server 2025 Active Directory 環境における dMSA（委任管理サービスアカウント）権限昇格の脆弱性を悪用するペネトレーションテストツール。 ⚠️ 法的免責事項 このツールは、許可を得たペネトレーションテストおよびセキュリティ研究目的のみで使用すること。 明示的な書面による許可なくシステムに対してこのツールを使用することは、違法かつ非倫理的です。作者は、このツールの誤用または損害について一切の責任を負いません。 ⚠️ 開発ステータスおよび環境テストに関する免責事項 重要：このツールは活発に開発およびテスト中です。...

CVE-2024-38077

CVE-2024-38077-EXP 의사 코드를 기반으로 수정된 코드. 유효 범위 EXP: Windows Server 2025 POC: 08-25 사용 root@kitploit: options: -h, --help show this help message and exit --targetip TARGETIP Target IP, eg: 192.168.120.1 --evilip EVILIP Evil IP, eg: 192.168.120.2 --evildllpath EVILDLLPATH Evil dll path, eg:...

azure-vulnerability-remediation-project

취약점 연구 및 조치: Azure 클라우드 인프라 프로젝트 개요 이 프로젝트는 클라우드 호스팅 Windows Server 2025 인스턴스CyberVM에 대한 종단 간 취약점 관리 수명 주기를 기록합니다. 이 랩은 직접적인 소프트웨어 패치와 아키텍처 보완 제어를 모두 사용하여 심각도가 높은 보안 위험을 식별, 분석 및 차단하는 사전 예방적 접근 방식을 보여줍니다. 1. 식별 및 기준 평가 초기 자격 증명 스캔은 Nessus Essentials 를 사용하여 보안 기준을 설정하기 위해 수행되었습니다. 스캔 결과 총 66개의 취약점...

CVE-2026-24294

CVE-2026-24294 - SMB任意ポート経由のローカルNTLMリフレクションによるLPE Windows Server 2025における、Windows 11 24H2 / Server 2025で導入されたSMB任意ポート機能を悪用した、NTLMリフレクションによるローカル権限昇格。 脆弱性 Windows 11 24H2 / Server 2025では、任意のTCPポートへの接続を可能にするSMBクライアント機能が導入されました（net use \host\share /tcpport:PORT）。SMBセッションマルチプレクシング（MS-SMB2 Section...

KB5122871: Windows Server 2025 Security Update (September 2026)

The remote Windows host is missing security update 5122871. It is, therefore, affected by multiple vulnerabilities - Heap-based buffer overflow in Windows USB Mass Storage Class Driver allows an unauthorized attacker to execute code over a network. CVE-2026-68839 - Integer underflow wrap or...

Windows 11 24H2/25H2 | Server 2025 - Recovery Media Restore Fails with: The Local Security Authority cannot be contacted

Issue Resolved in September 8 2026 Windows Updates The underlying issue documented in this article was resolved by Microsoft in the September 8 2026 security updates for Windows 11 KB5124008 and Windows Server 2025 KB5122871. After applying the update, the Veeam Recovery Media must be recreated...

KB5099536: Windows Server 2025 Security Update (July 2026)

The remote Windows host is missing security update 5099536. It is, therefore, affected by multiple vulnerabilities - Integer overflow or wraparound in Windows RDP allows an unauthorized attacker to execute code over a network. CVE-2026-58594 - Heap-based buffer overflow in Windows FTP Service...

June 9, 2026—KB5094125 (OS Build 26100.32995)

None None...

May 12, 2026—KB5087539(OS Build 26100.32860)

None None...

Microsoft Windows Deployment Services 资源管理错误漏洞

Microsoft Windows Deployment Services are a container for Windows deployment services an updated and redesigned version of Remote Installation Services RIS provided by Microsoft Corporation. These services allow for the setup of new computers through network-based unattended installations...

Microsoft Active Directory Domain Services 缓冲区错误漏洞

Microsoft Active Directory Domain Services is a key service provided by Microsoft Corporation in the United States. It is used to manage and organize resources, users, computers, and other security objects within a network. There are security vulnerabilities associated with Microsoft Active...

microsoft windows kerberos 缓冲区错误漏洞

Microsoft Windows Kerberos is a software developed by Microsoft for authentication in network clusters. As a network authentication protocol, its primary goal is to provide robust authentication services for client/server applications through a key system. There is a buffer error vulnerability...

Microsoft Windows SDK 数字错误漏洞

Microsoft Windows is an operating system used by personal devices by the American company Microsoft. There is a vulnerability in input validation of Microsoft Windows. Attackers can exploit this vulnerability to gain higher privileges. The following products and versions are affected: Windows 11...

Microsoft Windows TCP/IP 缓冲区错误漏洞

Microsoft Windows TCP/IP is a component provided by Microsoft Corporation that offers TCP/IP configuration functions for Windows. There are security vulnerabilities present in Microsoft Windows TCP/IP. The following products and versions are affected: Windows Server 2022, Windows Server 2022 Serv...

Microsoft Windows Secure Boot 权限许可和访问控制问题漏洞

Microsoft Windows Secure Boot is a security boot mechanism developed by Microsoft Corporation. There is an access control error vulnerability in Microsoft Windows Secure Boot. Attackers can exploit this vulnerability to bypass certain features. The following products and versions are affected:...

Microsoft Windows Ancillary Function Driver for WinSock 竞争条件问题漏洞

The Microsoft Windows Ancillary Function Driver for WinSock is a compatibility issue vulnerability in Winsock by Microsoft Corporation. Attackers can exploit this vulnerability to gain elevated privileges. The following products and versions are affected: Windows Server 2012 R2 Server Core...