atlant-harden

AtlantHarden — Herramienta de endurecimiento de seguridad para Windows, navegadores y Office AtlantHarden es una aplicación integral de endurecimiento de seguridad para Windows 10/11 con una interfaz de usuario moderna y profesional. Aplica 606 configuraciones de endurecimiento — incluyendo 354...

CVE-2023-36003

CVE-2023-36003: Windows Defender Exploit Protection Bypass PoC This repository contains a Proof of Concept PoC for CVE-2023-36003 , a critical security feature bypass vulnerability affecting Windows Defender Exploit Protection. Overview CVE-2023-36003 is a vulnerability in Windows Defender that...

CVE-2024-21338

CVE-2024-21338 Local Privilege Escalation from Admin to Kernel vulnerability on Windows 10 and Windows 11 operating systems with HVCI enabled. Compiling Use Microsoft Visual Studio with the C++ package to successfully compile the PoC on both Release and Debug modes. Post Original blog post:...

CVE-2025-24071-POC-NTLMHashDisclosure-

CVE-2025-24071-POC-NTLMHashDisclosure Triggers automatic SMB authentication to an attacker-controlled share. No interaction required — Windows Explorer initiates this NTLM authentication automatically. Results in NTLMv2 hash leakage information disclosure. Affects Windows 10/11 all versions,...

GDRVLoader

GDRVLoader - Load Unsigned Drivers Windows 10-11 Originally based from https://github.com/fengjixuchui/gdrv-loader but with improvements and support for latest windows versions. Added Features Load unsigned drivers on Windows 10-11 without getting caught by PatchGuard. Improved portability throug...

yellowkey-bitlocker

🔑 yellowkey-bitlocker - BitLockerで暗号化されたコンピュータのファイルをロック解除 📁 プロジェクト概要...

CVE-2022-37969

CVE-2022-37969 CVE-2022-37969 poc win10 21h2 19044.1766 win11 21h2 22000.918 ビルド基本情報 Windows SDK バージョン ：10.0 最新インストール版 プラットフォームツールセット: Visual Studio 2022 v143 C++ 言語標準 : 既定 ISO C++14 標準...

access_updated

Singular Access Updated fork ofbtbd/access with Zydis-based dynamic pattern finding for Windows 10/11 compatibility A kernel-mode syscall wrapper that enables privileged process operations without requiring handles. Uses xKdEnumerateDebuggingDevices pointer hooking for kernel-usermode...

CVE-2026-66804-CrossDevice-LPE

CVE-2026-66804: Microsoft Windows Cross Device Service Elevation of Privilege Vulnerability Proof of concept for a CrossDevice/FrameServer LPE I reported to MSRC which received CVE-2026-66804. It affects Windows 10 and Windows 11. Vulnerability Windows registers this machine-wide COM server:...

Cronos-Rootkit

Cronos Rootkit Cronos is Windows 10/11 x64 ring 0 rootkit. Cronos is able to hide processes, protect and elevate them with token manipulation. Features Hide process Elevate process permissions Protect process Contributions Contributions are welcome...

MsSettingsDelegateExecute

MsSettingsDelegateExecute Bypass UAC on Windows 10/11 x64 using ms-settings DelegateExecute registry key. This visual studio project will compile a static x64 binary to test this issue. License These files are available under the 3-clause BSD license...

winsos-poc

WinSOS This technique utilizes executables within the WinSxS folder, commonly trusted by Windows, to exploit the classic DLL Search Order Hijacking method. By leveraging these executables, threat actors can execute malicious code within Windows applications without requiring elevated privileges...

CVE-2026-68820_Mass_Exploit

CVE-2026-68820 — Mass Exploit Framework Edition. Automated module for mass local privilege escalation LPE to NT AUTHORITY\SYSTEM via a use-after-free vulnerability in the AFD.sys driver ancillary function driver. This exploit is designed for corporate environments: Supports Windows 10/11 all...

CVE-2024-43583-PoC

CVE-2024-43583 - Windows Privilege Escalation Exploit Author: No0B@ckSappi3 Instagram: No0BackSappi3 Overview CVE-2024-43583 is an elevation of privilege vulnerability affecting Microsoft's Winlogon component. Exploiting this flaw allows a low-privileged user to escalate their privileges to SYSTE...

YellowKey-BitLocker-CVE-2026-45585

YellowKey BitLocker YellowKey BitLocker Recovery Tool backs up BitLocker recovery keys and audits CVE-2026-45585 on Windows 10/11. Searches for bitlocker yellowkey , yellowkey bitlocker , yellowkey github and yellowkey vulnerability land here. Portable CLI + GUI for volumes you administer...

CVE-2023-23388

This repository contains a poc for CVE-2023-23388, which is described in this series, particularly in this post. It's an LPE in the bluetooth service aka bthserv in Windows 10/11 that allows an unprivileged user to escalate to LOCAL SERVICE. This repo doesn't contain an exploit, only a poc...

Script-For-CVE-2024-20666

Script-For-CVE-2024-20666 WinRE パーティションの更新を 最初にサイズ変更することなく 自動化し、CVE-2024-20666 BitLocker の脆弱性にパッチを適用します。 マイクロソフトのリンク スクリプトはこちら 対応OS Windows Server 2022 Server Core インストール KB5034439: Azure Stack HCI バージョン 22H2 および Windows Server 2022 向け Windows 回復環境の更新プログラム: 2024年1月9日 Windows Server 2022 KB5034439...

CVE-2022-33973

Improper access control in the IntelR WAPI Security software for Windows 10/11 before version 22.2150.0.1 may allow an authenticated user to potentially enable information disclosure via local access...

Plantronics Hub 3.25.1 Arbitrary File Read

Exploit Title: Plantronics Hub 3.25.1 – Arbitrary File Read Date: 2024-05-10 Exploit Author: Farid Zerrouk from Deloitte Belgium, Alaa Kachouh from Mastercard Vendor Homepage: https://support.hp.com/us-en/document/ish9869257-9869285-16/hpsbpy03895 Version: Plantronics Hub for Windows version 3.25...

Plantronics Hub 3.25.1 - Arbitrary File Read

Exploit Title: Plantronics Hub 3.25.1 – Arbitrary File Read Date: 2024-05-10 Exploit Author: Farid Zerrouk from Deloitte Belgium, Alaa Kachouh from Mastercard Vendor Homepage: https://support.hp.com/us-en/document/ish9869257-9869285-16/hpsbpy03895 Version: Plantronics Hub for Windows version 3.25...