EDR-Freeze

EDR-Freeze 이 도구는 BYOVDBring Your Own Vulnerable Driver 공격 방법을 사용하지 않고도 WerFaultSecure의 소프트웨어 취약점을 악용하여 EDR 및 안티맬웨어의 프로세스를 일시 중지시키는 도구입니다. EDR-Freeze는 사용자 모드에서 작동하므로 추가 드라이버를 설치할 필요가 없습니다. 최신 버전의 Windows에서 실행할 수 있습니다. 실험은 프로젝트 생성 당시 최신 버전의 Windows인 Windows 11 24H2에서 수행되었습니다. 명령줄 구문 EDR-Freeze.exe...

Windows-11-24h2-Kernel-Exploit

Windows-11-24h2-Kernel-Exploit Windows 11 24h2 LPE 커널 익스플로잇. CVE-2020-12446eneio64.sys...

CVE-2025-60709

🚨 EXPLOIT PoC — 보안 연구, 취약점 분석 및 방어 목적으로만 사용하십시오 🚨 EXPLOIT PoC — 보안 연구, 취약점 분석 및 방어 목적으로만 제공됩니다 🌐 언어 🇪🇸 스페인어 🇬🇧 영어 🇪🇸 스페인어 문서 설명 CVE-2025-60709 은 Windows CLFS.sysCommon Log File System 드라이버의 로컬 권한 상승LPE 취약점입니다. 로컬 코드 실행 권한이 있는 공격자는 CLFS 컨테이너 파싱의 버퍼 오버플로를 통해 일반 사용자에서 NT AUTHORITY\SYSTEM 으로 권한을 상승시킬 수...

CVE-2026-21250

CVE-2026-21250: Windows HTTP.sys 로컬 권한 상승 Windows 11 24H2 - 로컬 권한 상승 🚨 CVE-2026-21250 취약점에 대한 기술 분석 및 리소스 Windows 11 24H2 / 25H2 - Windows Server 2022/2025 이 저장소는 Windows의 HTTP.sys 드라이버에서 로컬 권한 상승LPE을 허용하는 신뢰할 수 없는 포인터 역참조 결함인 CVE-2026-21250 취약점 연구를 위한 기술 문서와 리소스를 포함합니다. 📝 설명 이 취약점은 낮은 권한을 가진 공격자...

windows_kernel_shadow_stack

개념 증명 Proof of Concepts 이 프로젝트는 Microsoft가 Windows 11에서 구현한 섀도 스택shadow stack 완화 기능의 특정 측면을 조명하는 것을 목표로 합니다. 코드는 특히 Windows 11 24H2에 초점을 맞추고 있습니다. 커널 오프셋 관리 방식으로 인해 다른 버전의 Windows 11에서는 작동하지 않을 수 있습니다. 이 프로젝트는 클라이언트와 드라이버 두 부분으로 나뉩니다. 둘 사이의 통신은 IOCTL 메커니즘을 통해 처리됩니다. 클라이언트는 드라이버에게 커널 수준에서 작업을 수행하도...

Microsoft Windows TCP/IP 缓冲区错误漏洞

Microsoft Windows TCP/IP is a component provided by Microsoft Corporation that offers TCP/IP configuration functions for Windows. There are security vulnerabilities present in Microsoft Windows TCP/IP. The following products and versions are affected: Windows Server 2022, Windows Server 2022 Serv...

Microsoft Windows Push Notifications 竞争条件问题漏洞

Microsoft Windows Push Notifications is a push notification service provided by the American company Microsoft. It provides a reliable way to deliver new updates. There are compatibility issues with Microsoft Windows Push Notifications. The following products and versions are affected: Windows...

Microsoft Windows Secure Boot 软件供应链问题漏洞

Microsoft Windows Secure Boot is a security boot mechanism developed by Microsoft Corporation. There are security vulnerabilities associated with Microsoft Windows Secure Boot. Attackers can exploit these vulnerabilities to bypass certain features. The following products and versions are affected...

Microsoft Windows Kernel 缓冲区错误漏洞

The Microsoft Windows Kernel is the kernel of the Windows operating system developed by Microsoft Corporation. There are security vulnerabilities in the Microsoft Windows Kernel. Attackers can exploit these vulnerabilities to gain higher privileges. The following products and versions are affecte...

Microsoft Windows DHCP Server 输入验证错误漏洞

Microsoft Windows DHCP Server is a core service of the American company Microsoft, used for automatically retrieving network configuration information. There are security vulnerabilities in Microsoft Windows DHCP Server. The following products and versions are affected: Windows 10 Version 22H2 fo...

Microsoft Windows Kerberos 异常处理不当漏洞

Microsoft Windows Kerberos is a software developed by Microsoft for authentication in network clusters. As a network authentication protocol, its primary goal is to provide robust authentication services for client/server applications through a key system. There are code-related vulnerabilities i...

Microsoft Hyper-V 缓冲区错误漏洞

Microsoft Hyper-V is an application developed by Microsoft Corporation in the United States. It is a system management program that enables desktop virtualization. There is a code execution vulnerability present in Microsoft Hyper-V. Attackers can exploit this vulnerability to execute arbitrary...

Microsoft Windows TCP/IP 资源管理错误漏洞

Microsoft Windows TCP/IP is a component provided by Microsoft Corporation that offers TCP/IP configuration functions for Windows. There is a resource management vulnerability in Microsoft Windows TCP/IP. The following products and versions are affected: Windows 10 Version 1809 for 32-bit systems,...

Microsoft Windows Kernel 安全漏洞

The Microsoft Windows Kernel is the kernel of the Windows operating system developed by Microsoft Corporation. There are security vulnerabilities present in the Microsoft Windows Kernel. Attackers can exploit these vulnerabilities to gain higher privileges. The following products and versions are...

Microsoft Win32k 竞争条件问题漏洞

Microsoft Win32k is a system file used by Microsoft for multi-user management in Windows. There are competitive conditions vulnerabilities associated with Microsoft Win32k. The following products and versions are affected: Windows Server 2019 Server Core installation, Windows Server 2022, Windows...

Microsoft Windows Secure Boot 安全漏洞

Microsoft Windows Secure Boot is a security boot feature provided by Microsoft Corporation. There are security vulnerabilities associated with Microsoft Windows Secure Boot. Attackers can exploit these vulnerabilities to bypass certain features. The following products and versions are affected:...

Microsoft Windows 安全漏洞

Microsoft Windows is an operating system used by personal devices by the American company Microsoft. There are security vulnerabilities in Microsoft Windows. Attackers can exploit these vulnerabilities to execute code remotely. The following products and versions are affected: Windows 10 Version...

Microsoft Hyper-V 数字错误漏洞

Microsoft Hyper-V is an application developed by Microsoft Corporation in the United States. It is a system management program that enables desktop virtualization. Microsoft Hyper-V has a numerical error vulnerability. Attackers can exploit this vulnerability to execute code. The following produc...

Microsoft Windows 资源管理错误漏洞

Microsoft Windows is an operating system used by personal devices by the American company Microsoft. There is a resource management vulnerability in Microsoft Windows. Attackers can exploit this vulnerability to gain higher privileges. The following products and versions are affected: Windows 10...

Microsoft Windows Cryptographic Services 安全漏洞

Microsoft Windows Cryptographic Services are encryption services provided by Microsoft Corporation. There are security vulnerabilities in Microsoft Windows Cryptographic Services. Attackers can exploit these vulnerabilities to gain higher privileges. The following products and versions are...