Windows10Exploits

Windows10Exploits Download a single CVE The variable is only for example ; you can make your own SVN script for downloading a single folder = CVE = BR @nu11secur1ty $CVE = CVE-2018-0833 svn checkout https://github.com/nu11secur1ty/Windows10Exploits/trunk/Undefined/$CVE Link table of Analysis...

CVE-2023-36003

CVE-2023-36003: Windows Defender Exploit Protection Bypass PoC This repository contains a Proof of Concept PoC for CVE-2023-36003 , a critical security feature bypass vulnerability affecting Windows Defender Exploit Protection. Overview CVE-2023-36003 is a vulnerability in Windows Defender that...

SMB-Penetration-Testing-NTLM-Relay-Version-2-

SMB Penetration Testing — NTLM Relay Attack Red Team Lab — NTLM Relay via LLMNR Poisoning, CVE-2007-2447, NTLMv2 Hash Cracking & NT AUTHORITY\SYSTEM on Windows 10 Author Field| Details ---|--- Name| Younes GitHub| @Youneskc Type| Penetration Testing Lab Status| Completed Legal Disclaimer This...

r0ak

r0ak r0ak "roak" is the Ring Zer0 Army Knife -- A Command Line Utility To Read/Write/Execute Ring on for Windows 10 Systems...

CVE-2024-21338

CVE-2024-21338 Local Privilege Escalation from Admin to Kernel vulnerability on Windows 10 and Windows 11 operating systems with HVCI enabled. Compiling Use Microsoft Visual Studio with the C++ package to successfully compile the PoC on both Release and Debug modes. Post Original blog post:...

WSuspicious

WSuspicious Resumen Este es un programa de prueba de concepto para escalar privilegios en un host Windows abusando de WSUS. Detalles en esta entrada de blog: https://www.gosecure.net/blog/2020/09/08/wsus-attacks-part-2-cve-2020-1013-a-windows-10-local-privilege-escalation-1-day/ Fue inspirado por...

bitcracker

BitCracker BitCracker is the first open source password cracking tool for storage devices Hard Disk, USB Pendrive, SD card, etc... encrypted with BitLocker, an encryption feature available on Windows Vista, 7, 8.1 and 10 Ultimate, Pro and Enterprise editions. BitLocker offers a number of differen...

Invoke-HiveNightmare

Invoke-HiveNightmare PowerShell-based PoC for CVE-2021-36934, which enables a standard user to be able to retrieve the SAM, Security, and Software Registry hives in Windows 10 version 1809 or newer. Situation In specific versions of Windows 10, standard users have read/execute rights to files in...

pinjectra

Pinjectra Pinjectra is a C/C++ library that implements Process Injection techniques with focus on Windows 10 64-bit in a "mix and match" style. Here's an example: // CreateRemoteThread Demo + DLL Load i.e., LoadLibraryA as Entry Point executor = new CodeViaCreateRemoteThread new...

CVE-2021-31166-exploit

CVE-2021-31166 HTTP Protocol Stack Remote Code Execution Vulnerability Attacked version： Microsoft:Windows 10: version 2004 for 32-bit Systems version 2004 for x64-based Systems version 2004 for ARM64-based Systems version 20H2 for 32-bit Systems version 20H2 for x64-based Systems version 20H2 fo...

prefetch-hash-cracker

Prefetch Hash Cracker Motivation During the forensic analysis of a Windows machine, you may find the name of a deleted prefetch file. While its content may not be recoverable, the filename itself is often enough to find the full path of the executable for which the prefetch file was created. Usin...

CVE-2025-68921

🎮 CVE-2025-68921 - Secure Your Gaming Laptop Today 🚀 Getting Started Welcome to CVE-2025-68921. This application helps protect your gaming laptop from vulnerabilities affecting millions of devices. Follow the steps below to download and run the software. 🔗 Download Now 💾 System Requirements To ru...

letsploit

letsploit letsploit es una herramienta que detecta el nivel de parches del sistema local o de otro sistema Windows 10, lo compara con los últimos parches disponibles y encuentra posibles vulnerabilidades CVE, así como código de explotación disponible públicamente. Inspirado por los siguientes...

Py-RDP-Patcher

Py-RDP-Patcher Py-RDP-Patcher es una herramienta hecha en Python para parchear el archivo termsrv y permitir sesiones RDP simultáneas. Guía de configuración: Este script solo requiere la biblioteca art, la cual se instala ejecutando: pip install art Requisitos: Python3, Windows Limitaciones: Por...

PyNightmare

PyNightmare PoC for CVE-2021-36934 Aka HiveNightmare/SeriousSAM fully written in python3 Explanation CVE-2021-36934 is a recently discovered vulnerability found by @jonasLyk allowing non-admin users to copy all registry hives which contain very private information like hashes which could lead to...

CVE-2018-6537.RCE

CVE-2018-6537 The exploit targets Sync Breeze running on Windows 10 x86, build: 16299 , affecting version 10.4.18 , where an unauthenticated attacker can perform a SEH overflow via a TCP-connection, resulting in remote code execution. This exploit assumes all security mitigations are disabled e.g...

CVE-2017-14980.RCE

CVE-2017-14980 The exploit targets Sync Breeze Enterprise running on Windows 10 x86, build: 16299 , affecting version 10.0.28 , where an unauthenticated attacker can perform a buffer overflow via an HTTP-request body , resulting in arbitrary code execution. This exploit assumes all security...

CVE-2025-24071-POC-NTLMHashDisclosure-

CVE-2025-24071-POC-NTLMHashDisclosure Triggers automatic SMB authentication to an attacker-controlled share. No interaction required — Windows Explorer initiates this NTLM authentication automatically. Results in NTLMv2 hash leakage information disclosure. Affects Windows 10/11 all versions,...

CVE-2020-17008

CVE-2020-17008 splWOW64 Elevation of Privilege C:\Windows\splwow64.exe Poc From: https://bugs.chromium.org/p/project-zero/issues/detail?id=2096 0x01 set splwow64poc.exe Low cd splwow64poc\x64\Release icacls splwow64poc.exe /setintegritylevel L /setintegritylevel CIOI级别将完整性 ACE 显式...

Windows-Privilege-Escalation-CVE-2021-1732

Windows Privilege Escalation CVE-2021-1732 Affected windows versions: Win10 1803 - 20H2, WinServer 2019, 2004 Screenshots: Read More On My Blog:- https://www.exploitblizzard.com/post/windows-privilege-escalation-cve-2021-1732...