CVE-2020-17103

🛡️ MiniPlasma - CVE-2020-17103 A Windows Local Privilege Escalation Zero-Day Turning placeholder files into SYSTEM access 📋 Overview MiniPlasma is a powerful local privilege escalation exploit targeting CVE-2020-17103 in the Windows Cloud Files Mini Filter Driver cldflt.sys. It allows any standard...

CVE-2023-36874

CVE-2023-36874 Proof of Concept PoC An educational and defensive research implementation of the CVE-2023-36874 vulnerability, demonstrating a Local Privilege Escalation LPE flaw within the Windows Error Reporting WER component. ⚠️ Disclaimer This repository and the provided source code are intende...

BrainDamage

BrainDamage A python based remote administration tool which uses Telegram as C&C server. /\ /.\ ,.-'/ ",'-., -^ /-^: | \ | \ | | | | | | | | Coded by: Mehul Jain -- For windows only | | | | | | | | | / / | | | | | '/ / | | | | / | | || || | | | /\ \ || |,||,|| ||/ -- Persistance -- USB...

cve-2026-0828

CVE-2026-0828 — Safetica ProcessMonitorDriver.sys BYOVD PoC Safetica DLP kernel driver ProcessMonitorDriver.sys exposes an unauthenticated IOCTL that allows any user-mode caller to terminate arbitrary processes via ZwTerminateProcess in kernel context, bypassing PPL Protected Process Light...

CVE-2018-19320

CVE-2018-19320 Exploiting ring0 memcpy-like functionality to disable Driver Signing Enforcement DSE as documented here: http://deniable.org/windows/windows-callbacks References https://cve.mitre.org/cgi-bin/cvename.cgi?name=2018-19320...

BiBi-Windows-Wiper-Analysis

Technical Analysis of BiBi-Windows Wiper Targeting Israeli Organizations On 30th October, Security Joes Incident Response team discovered a new Linux Wiper named "BiBi-Linux" Wiper been deployed by Pro-Hamas Hacktivist group to destroy their infrastructure. And then on November 1 2023, ESET...

ms08-067.py

📖 Overview This repository contains some python scripts implementation for the MS08-067 Windows Server Service vulnerability CVE-2008-4250. This is a classic remote code execution vulnerability affecting older Windows systems. 🛠️ Installation & Usage Prerequisites Python3 Authorized testing...

CVE-2019-0232

CVE-2019-0232 Apache Tomcat CGIServlet enableCmdLineArguments RCE Windows batch script injection via query string arguments Description Apache Tomcat with the CGI servlet enabled and enableCmdLineArguments=true passes query string parameters as command-line arguments to CGI scripts. On Windows,...

CVE-2026-20841

CVE-2026-20841 - Windows Notepad Remote Code Execution RCE Security Research & Technical Analysis Repository ⚠️ This repository is intended for educational, defensive, and research purposes only. 📖 Overview CVE-2026-20841 is a critical Remote Code Execution RCE vulnerability affecting Microsoft...

miniplasma-advisory

MiniPlasma - Vulnerability Protection Advisory Technical mitigation advisory for the MiniPlasma variant of CVE-2020-17103 affecting the Windows Cloud Files Mini Filter Driver cldflt.sys. Authored by Rafael França - Microsoft Cybersecurity Architect CSA, Customer Success Unit CSU. Download...

CVE-2026-4255

CVE-2026-4255 Thermalright TR-VISION HOME DLL Side-Loading Privilege Escalation Severity: HIGH CVSS 8.4 CWE: CWE-829 Inclusion of Functionality from Untrusted Control Sphere Published: 16/03/2026 CNA: Toreon Affected versions: Thermalright TR-VISION HOME ≤ 2.0.5 Windows 64-bit Discovered by: Ard3...

CVE-2025-62215

CVE-2025-62215 INTEGRATED EXPLOIT SUITE v4.5 1. Project Overview This project is an automated exploit tool suite targeting Windows Kernel Race Condition and Double-Free vulnerabilities. It combines dynamic offset extraction using the WinDbg JS engine with real-time binary loading technology of th...

RRAS-VULNERABILITY-CVE-2026-25172-CVE-2026-25173-CVE-2026--26111

Windows 11 RRAS Vulnerability Simulation Lab CVE-2026-25172, CVE-2026-25173, CVE-2026-26111 ⚠️ IMPORTANT – Educational & Defensive Use Only This guide is for setting up an isolated, controlled lab environment to understand integer overflow vulnerabilities in the Windows Routing and Remote Access...

CVE-2026-50656-rogueplanet-validation

RoguePlanet PoC Validation Report for Microsoft Defender Purpose and scope of the report This report concerns the validation of the publicly described RoguePlanet PoC related to Microsoft Defender. The described technique was presented in the media on 10 June 2026 as a Local Privilege Escalation...

ludus_crushftp_cve-2025-31161_sim

Ansible Role: CrushFTP CVE-2025-31161 Simulation Ludus Companion role for luduscrushftpcve-2025-31161 that adds a realistic scenario layer on top of the vulnerable CrushFTP instance. !NOTE This role requires the main luduscrushftpcve-2025-31161 role to be applied first. What It Does Simulated...

dns_client_fuzzing

Fuzzing the Microsoft Windows DNS client After the critical vulnerability of CVE-2026-41096 was discovered, I decided to take a crack at this...

cve-2025-7771

CVE-2025-7771 — ThrottleStop.sys LPE Proof-of-concept for CVE-2025-7771. ThrottleStop.sys exposes two IOCTL handlers that allow arbitrary physical memory read/write with no access control — any admin process can read or write anywhere in physical RAM. Tested on Windows 10 22H2 and Windows 11 23H2...

forti_shield

fortishield A combined POC for CVE-2021-31955, CVE-2015-4077, and CVE-2015-5736 This one of the possible solutions for an extra mile in the 2022 version of the EXP-401 course. This extra mile was removed in the 2025 version of the course. This solution will not work for the current extra mile...

CVE-2022-24521

CVE-2022-24521 CVE-2022-24521 PoC win10 21h2 19044.1620 win11 21h2 22000.593 Compilation Basic Information Windows SDK Version: 10.0 latest installed version Platform Toolset: Visual Studio 2022 v143 C++ Language Standard: Default ISO C++14 Standard...

Privilege_Escalation

PrivilegeEscalation An windows UAC Bypass made simple 😋 Features Auto bypass for Windows 7/8/10 Manual bypass Failsafe delete all registry key made from Privilege Escalation Build git clone https://github.com/Mrakovic-ORG/PrivilegeEscalation cd PrivilegeEscalation\PrivilegeEscalation dotnet build...