yellowkey-bitlocker

🔑 yellowkey-bitlocker - Unlock your BitLocker encrypted computer files 📁 Project Overview The yellowkey-bitlocker tool provides a way to regain access to your Windows storage drives. Many users encounter issues with BitLocker drive encryption, which can lock files during updates or hardware...

CVE-2024-21338

CVE-2024-21338 Local Privilege Escalation from Admin to Kernel vulnerability on Windows 10 and Windows 11 operating systems with HVCI enabled. Compiling Use Microsoft Visual Studio with the C++ package to successfully compile the PoC on both Release and Debug modes. Post Original blog post:...

CVE-2023-36003

CVE-2023-36003: Windows Defender Exploit Protection Bypass PoC This repository contains a Proof of Concept PoC for CVE-2023-36003 , a critical security feature bypass vulnerability affecting Windows Defender Exploit Protection. Overview CVE-2023-36003 is a vulnerability in Windows Defender that...

atlant-harden

AtlantHarden — Windows, Browser & Office Security Hardening Tool AtlantHarden is a comprehensive Windows 10/11 security hardening application with a modern, professional UI. It applies 606 hardening settings — including 354 DISA STIG controls across Windows 11, Edge, Chrome, Firefox, and Office 3...

Script-For-CVE-2024-20666

Script-For-CVE-2024-20666 Automate updating the WinRE partition without having to resize it first and patch the CVE-2024-20666 BitLocker vulnerability. Microsoft Link Script found here Works for Windows Server 2022 Server Core installation KB5034439: Windows Recovery Environment update for Azure...

CVE-2025-24071-POC-NTLMHashDisclosure-

CVE-2025-24071-POC-NTLMHashDisclosure Triggers automatic SMB authentication to an attacker-controlled share. No interaction required — Windows Explorer initiates this NTLM authentication automatically. Results in NTLMv2 hash leakage information disclosure. Affects Windows 10/11 all versions,...

GDRVLoader

GDRVLoader - Load Unsigned Drivers Windows 10-11 Originally based from https://github.com/fengjixuchui/gdrv-loader but with improvements and support for latest windows versions. Added Features Load unsigned drivers on Windows 10-11 without getting caught by PatchGuard. Improved portability throug...

veneficus

@abraxasnull · [email protected] · abraxaslabs.tech · github.com/abraxas/veneficus Credit: @YoSoth0 Veneficus Mini v3.0 Windows 10/11 x64 implant kit: a PowerShell stager , a Rust PE , and a Cloudflare Worker that pages the operator on Telegram. The stager resources/loader.ps1 is meant to...

CVE-2022-37969

CVE-2022-37969 CVE-2022-37969 poc win10 21h2 19044.1766 win11 21h2 22000.918 Compilation Basic Information Windows SDK Version: 10.0 latest installed version Platform Toolset: Visual Studio 2022 v143 C++ Language Standard: Default ISO C++14 Standard...

access_updated

Singular Access Updated fork ofbtbd/access with Zydis-based dynamic pattern finding for Windows 10/11 compatibility A kernel-mode syscall wrapper that enables privileged process operations without requiring handles. Uses xKdEnumerateDebuggingDevices pointer hooking for kernel-usermode...

CVE-2024-43583-PoC

CVE-2024-43583 - Windows Privilege Escalation Exploit Author: No0B@ckSappi3 Instagram: No0BackSappi3 Overview CVE-2024-43583 is an elevation of privilege vulnerability affecting Microsoft's Winlogon component. Exploiting this flaw allows a low-privileged user to escalate their privileges to SYSTE...

CVE-2026-66804-CrossDevice-LPE

CVE-2026-66804: Microsoft Windows Cross Device Service Elevation of Privilege Vulnerability Proof of concept for a CrossDevice/FrameServer LPE I reported to MSRC which received CVE-2026-66804. It affects Windows 10 and Windows 11. Vulnerability Windows registers this machine-wide COM server:...

Cronos-Rootkit

Cronos Rootkit Cronos is Windows 10/11 x64 ring 0 rootkit. Cronos is able to hide processes, protect and elevate them with token manipulation. Features Hide process Elevate process permissions Protect process Contributions Contributions are welcome...

MsSettingsDelegateExecute

MsSettingsDelegateExecute Bypass UAC on Windows 10/11 x64 using ms-settings DelegateExecute registry key. This visual studio project will compile a static x64 binary to test this issue. License These files are available under the 3-clause BSD license...

winsos-poc

WinSOS This technique utilizes executables within the WinSxS folder, commonly trusted by Windows, to exploit the classic DLL Search Order Hijacking method. By leveraging these executables, threat actors can execute malicious code within Windows applications without requiring elevated privileges...

CVE-2026-68820_Mass_Exploit

CVE-2026-68820 — Mass Exploit Framework Edition. Automated module for mass local privilege escalation LPE to NT AUTHORITY\SYSTEM via a use-after-free vulnerability in the AFD.sys driver ancillary function driver. This exploit is designed for corporate environments: Supports Windows 10/11 all...

CVE-2023-23388

This repository contains a poc for CVE-2023-23388, which is described in this series, particularly in this post. It's an LPE in the bluetooth service aka bthserv in Windows 10/11 that allows an unprivileged user to escalate to LOCAL SERVICE. This repo doesn't contain an exploit, only a poc...

YellowKey-BitLocker-CVE-2026-45585

YellowKey BitLocker YellowKey BitLocker Recovery Tool respalda las claves de recuperación de BitLocker y audita CVE-2026-45585 en Windows 10/11. Las búsquedas de bitlocker yellowkey , yellowkey bitlocker , yellowkey github y yellowkey vulnerability aterrizan aquí. CLI + GUI portátil para volúmene...

YellowKey-Bitlocker-CVE-2026-45585 — Updated!

🛡️ YellowKey-Bitlocker-CVE-2026-45585 - Recover Your BitLocker Keys Safely 📋 What This Software Does YellowKey is a free open-source utility for Windows 10 and Windows 11. It helps you extract, backup, and view your BitLocker recovery keys. This is useful if you lost access to your encrypted drive...

CVE-2022-33973

Improper access control in the IntelR WAPI Security software for Windows 10/11 before version 22.2150.0.1 may allow an authenticated user to potentially enable information disclosure via local access...