254141 matches found
Reg1c1de
Reg1c1de: Windows Registry Privesc Scanner Summary from help output: Reg1c1de is a tool that scans specified registry hives and reports on any keys where the user has write permissions In addition, if any registry values are found that contain file paths with certain file extensions and they are...
bt2
bt2: Blaze Telegram Backdoor Toolkit bt2 is a Python-based backdoor in form of a IM bot that uses the infrastructure and the feature-rich bot API provided by Telegram, slightly repurposing its communication platform to act as a C&C. Dependencies Telepot requests Installation $ sudo pip install...
Kerberos Privilege Escalation
The vulnerability of the Kerberos protocol for Windows operating systems is related to errors in the mechanism for handling relative pathnames to the directory. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...
CVE-2024-21338
CVE-2024-21338 Local Privilege Escalation from Admin to Kernel vulnerability on Windows 10 and Windows 11 operating systems with HVCI enabled. Compiling Use Microsoft Visual Studio with the C++ package to successfully compile the PoC on both Release and Debug modes. Post Original blog post:...
CVE-2020-0601
ChainOfFools AKA CurveBall AKA CVE-2020-0601 Collection of CVE-2020-0601 ChainOfFools | CurveBall resources General A summary from the NSA advisory states. NSA has discovered a critical vulnerability CVE-2020-0601 affecting Microsoft Windows®1 cryptographic functionality. The certificate validati...
libptrace
libptrace libptrace is an event driven process/thread debugging, tracing, and manipulation framework. It is written in C and has Python 2.7 and 3.7 bindings. It is meant to be used as a library. The API has been designed with cross-platform support in mind. Although the current version only runs ...
Creds
Creds Some usefull Scripts and Executables for Pentest & Forensics Most Scripts/Executables are Windows / Domain specific. Legal disclaimer: Usage of theese Scripts/Executables for attacking targets without prior mutual consent is illegal. It's the end user's responsibility to obey all applicable...
PrintNightmare-Patcher
Introduction PrintNightmare-Patcher, a simple tool that resolves the PrintNightmare vulnerability, which occurs to print spooler service for Windows machines CVE-2021-34527. In addition, it checks if your system has the relevant security update for it or not. Installation git clone...
CVE-2025-54918-POC
CVE-2025-54918 – Proof of Concept PoC ⚠️ Important Notice IMPORTANT: To test CVE-2025-54918 , you must create a DNS record in the target Active Directory environment. Always consult with the client and obtain explicit authorization before testing, as this can impact DNS and authentication behavior...
bluekeep_metasploit_practice
bluekeepmetasploitpractice Exploiting bluekeep CVE-2019-0708 on windows 7 using metasplotable...
Bluekeep-Metasploit-Lab-Project
Exploiting BlueKeep CVE-2019-0708 on Windows 7 Objective Gain remote access to an unpatched Windows 7 system via the BlueKeep RDP vulnerability using Metasploit. Lab Setup Attacker: Kali Linux Target: Windows 7 Unpatched, RDP Enabled Network: NAT / Host-Only Tools Used Metasploit Framework Kali...
Citrix_Secure_Access_LPE_0DAY
Citric Secure Access Local privilege escalation I have discovered a local privilege escalation vulnerability in the Citrix Secure Access Windows Client. This vulnerability allows a privileged administrator to inject a malicious payload to gain NT Authority privileges. The affected versions of...
LPE---CVE-2020-0796
Usage: Make sure Python is installed, then run poc.py. Windows Kernel Write-What-Where CVE-2020-0796 Exploit Intended only for educational and testing in corporate environments. MasterSpl0it takes no responsibility for the code, use at your own risk. Rewritten CVE-2020-0796 Local Privilege...
CVE-2020-0668
CVE-2020-0668 Use CVE-2020-0668 to perform an arbitrary privileged file move operation. Use https://github.com/itm4n/UsoDllLoader Windows = 1903 OR https://github.com/xct/diaghub Windows 1903 for privilege escalation. Demo Links & Resources...
awesome-hex-editors
awesome-hex-editors A curated and enriched list of awesome hexadecimal editors for Windows, macOS, and Linux. Hex Editors All programs listed bellow have the basic capabilities expected from an hex editor such as viewing, editing, and searching. The number of highlight tags in this list is not a...
CVE-2024-36991
CVE-2024-36991 Path traversal vulnerability in Splunk Enterprise on Windows versions below 9.2.2, 9.1.5, and 9.0.10 that allows reading sensitive files...
CVE-2022-22029-NFS-Server-
Windows Network File System Remote Code Execution Vulnerability CVE-2022-22039 To successfully exploit this vulnerability, an attacker must succeed in a race condition. Making an unauthenticated, carefully constructed call to a Network File System NFS service could be used to exploit this...
TangledWinExec
Tangled WinExec This repository is for investigation of Windows process execution techniques. Most of PoCs are given a name corresponding to the technique. Projects BlockingDLL : This toolset is for testing blocking DLL process. See README.md. CloneProcess : This directory is for process forking...
CVE-2011-1237
CVE-2011-1237 This is an old POC for CVE-2011-1237 on Windows 7 written in 2013. The vulnerability was discovered by Tarjei Mandt @kernelpool and explain in his paper Kernel Attacks through User-Mode Callbacks. Several things are hardcoded in this POC and it call the Null page which does not work...