CVE-2025-62215

CVE-2025-62215 INTEGRATED EXPLOIT SUITE v4.5 1. Project Overview This project is an automated exploit tool suite targeting Windows Kernel Race Condition and Double-Free vulnerabilities. It combines dynamic offset extraction using the WinDbg JS engine with real-time binary loading technology of th...

attack_monitor

Attack Monitor Attack Monitor is Python application written to enhance security monitoring capabilites of Windows 7/2008 and all later versions workstations/servers and to automate dynamic analysis of malware. Current modes mutually exclusive: Endpoint detection ED Malware analysis on dedicated...

SMBGhost-LPE-Metasploit-Module

SMBGhost-LPE-Metasploit-Module This is an implementation of the CVE-2020-0796 aka SMBGhost vulnerability, compatible with the Metasploit Framework Notes: This module made to be used when you have a valid shell to escalate your privileges. You can change the payload, if you want to have your custo...

CVE-2021-36934

CVE-2021-36934 CVE-2021-36934 PowerShell scripts Detection.ps1 This is a quick and dirty script to see if a machine may be vulnerable. It writes out a message to the shell indicating if BUILTIN\Users was detected in the permission list and includes the current permissions on the SAM path for...

CVE-2025-54918-POC

CVE-2025-54918 – Proof of Concept PoC ⚠️ Important Notice IMPORTANT: To test CVE-2025-54918 , you must create a DNS record in the target Active Directory environment. Always consult with the client and obtain explicit authorization before testing, as this can impact DNS and authentication behavior...

binlex

| Binlex - A Binary Genetic Trait Lexer Framework If maldevs think their binary is FUD, they're about to have an existential crisis. ---|--- Binlex extracts instructions, basic blocks, and functions from binaries and emits searchable JSON traits for reverse engineering, hunting, and similarity...

MS16-051-poc

CVE-2016-0189 Proof-of-Concept exploit for CVE-2016-0189 VBScript Memory Corruption in IE11 Tested on Windows 10 IE 11. Write-up https://www.deamwork.com/archives/patch-analysis-of-cve-2016-0189.orz6 To run 1. Download support/.dll or compile .cpp for yourself and exploit/.html to a directory. 2...

CVE-2019-0708

CVE-2019-0708 CVE-2019-0708 - A Win7 RDP exploit Sidenote: why?...

hacking-team-windows-kernel-lpe

This an exploit for CVE-2015-2426 MS-078, a Windows kernel local privilege escalation 0day from the Hacking Team archive email here. It was developed by Eugene Ching / Qavar security. Original contents below: Summary. Windows kernel memory corruption exploit leading to privilege escalation. Teste...

CVE-2020-3153

CVE-2020-3153 POC code for CVE-2020-3153 - Cisco anyconnect path traversal vulnerability Read more about the vulnerability here: https://ssd-disclosure.com/ssd-advisory-cisco-anyconnect-privilege-elevation-through-path-traversal/ Steps to follow to get Windows shell on desktop with SYSTEM...

microsoft-cve-2021-1675

!IMPORTANT "This repo is now in 'Blue Screen' mode-archived and frozen in time!" Microsoft-CVE-2021-1675 I have created a small C project that exploits vulnerability CVE-2021-1675. For more information about CVE-2021-1675, please check my blog post:...

Outpacket

📦 Outpacket Tired of impacket? This cheatsheet maps common impacket workflows to their modern alternatives Index Auth Quick Reference 1. Remote Execution WMI Exec · wmiexec.py DCOM Exec · dcomexec.py Service-Based Exec · smbexec.py · psexec.py Scheduled Task Exec · atexec.py Bulk Execution ·...

EhTrace

EhTrace EhTrace pronounced "ATrace" is a high-performance binary tracing and instrumentation framework for Windows. It enables deep runtime analysis of Windows executables without requiring source code, binary modifications, or traditional debugging. Overview EhTrace leverages Windows Vectored...

evil-winrm-py

evil-winrm-py evil-winrm-py is a python-based tool for executing commands on remote Windows machines using the WinRM Windows Remote Management protocol. It provides an interactive shell with enhanced features like file upload/download with progress and checksum verification, tab-completion of...

CVE-2021-1675-LPE-EXP

CVE-2021-1675-LPE-EXP Simple LPE Exploit of CVE-2021-1675 Usage CVE-2021-1675-LPE.exe C:\test\MyPigDLL.dll MyPigDLL.dll,is a test DLL which will create C:\test.txt if succeed Notice 1. Add EnumPrinterDriversW for get pDriverPath, so We dont need change the "hardcode Driver path" everytime 2. Dont...

CVE-2025-24071

Security Vulnerability Report: CVE-2025-24071 - Windows File Explorer Spoofing Vulnerability Overview NSFOCUS CERT has detected that Microsoft recently released a security update to address a critical spoofing vulnerability in Windows File Explorer, identified as CVE-2025-24071. This vulnerabilit...

Windows11Exploits

Windows11Exploits...

flare-ida

Code Grafter Function Replacements About Code Grafter Code Grafter is an IDA Python script that makes it possible to use IDA Pro's Bochs IDB Mode to emulate code that imports Windows API functions. Emulation environments like Bochs IDB mode do not resolve or emulate imported functions, resulting ...

CVE-2016-7255

CVE-2016-7255 Used to exploit cve-2016-7255 in 64 bit versions of Windows, tested on Workstation 7 SP1, 8.1, 10 prior to build 1607, and Server 2012 R2. To use cve-2016-7255 cve-2016-7255.exe 7 - Windows 7 SP1 cve-2016-7255.exe 81 - Windows 8.1 cve-2016-7255.exe 10 - Windows 10 prior to build 160...

windiff

WinDiff About WinDiff is an open-source web-based tool that allows browsing and comparing symbol, type and syscall information of Microsoft Windows binaries across different versions of the operating system. The binary database is automatically updated to include information from the latest Windo...