23118 matches found
ZeroLogon-CVE-2020-1472-lab
ZeroLogon-CVE-2020-1472 Explanation and demonstration of the ZeroLogon CVE-2020-1472 vulnerability The purpose of this lab is strictly educational. Its execution is not recommended in production environments or those that do not belong to you. About the Vulnerability Context of the vulnerability...
Windows-Privilege-Escalation-CVE-2021-1732
Windows Privilege Escalation CVE-2021-1732 Affected windows versions: Win10 1803 - 20H2, WinServer 2019, 2004 Screenshots: Read More On My Blog:- https://www.exploitblizzard.com/post/windows-privilege-escalation-cve-2021-1732...
Remediating-CVE-2013-3900-EnableCertPaddingCheck-
Remediation Report: CVE-2013-3900 on Windows Server 2019 Azure VM Remediating CVE-2013-3900 EnableCertPaddingCheck During an authenticated vulnerability scan using Tenable/ Nessus, I identified CVE-2013-3900 on my Windows Server 2019 Datacenter instance hosted in Microsoft Azure. The scan utilize...
CertificateDsc
CertificateDsc CĆ³digo de conducta Este proyecto ha adoptado este cĆ³digo de conducta. Lanzamientos Por cada fusiĆ³n en la rama main se publicarĆ” una versiĆ³n preliminar en PowerShell Gallery. PeriĆ³dicamente se enviarĆ” una etiqueta de versiĆ³n que publicarĆ” una versiĆ³n completa en PowerShell Gallery...
DanderSpritz_lab
DanderSpritz Lab Purpose The goal of DanderSpritz lab is to allow researchers and defenders to quickly stand up a fully functional version of DanderSpritz - The Equation Group's Post exploitation tool-set and a Windows Server 2008 Domain and client as targets. The Windows target have some reverse...
CVE-2017-7269
CVE 2017.7269 PoC Index CVE 2017.7269 PoC Index Authors Abstract What is Microsoft IIS? What is Microsft Windows server? What is WebDAV? Description Usage: References & Discoverers Authors NoexDevPen - Beacons Profile mag4no10 - Beacons Profile Abstract What is Microsoft IIS? Internet Information...
GOAD
GOAD v3 š DocumentaciĆ³n : https://orange-cyberdefense.github.io/GOAD/ DescripciĆ³n GOAD es un proyecto de laboratorio de Active Directory para pentesting. El propĆ³sito de este laboratorio es ofrecer a los pentesters un entorno de Active Directory vulnerable y listo para usar para practicar tĆ©cnica...
CVE-2023-28231
CVE-2023-28231 DHCP Server Remote Code Execution impact: 2008 R2 SP1 hasta Server 2019...
my-CVE-2021-1675
= Print Nightmare Analysis Report :imagesdir: Figures :toc: :icons: font :figure-caption: Figure :xrefstyle: short :pdf-theme: basic-theme.yml On June 29, 2021, a very severe Windows Print Spooler vulnerability was exposed as a 0-day, with a base score of 8.8, and was published on GitHub now...
CVE-2021-1675
CVE-2021-1675 - PrintNightmare LPE PowerShell Caleb Stewart | John Hammond | June 1, 2021 CVE-2021-1675 is a critical remote code execution and local privilege escalation vulnerability dubbed "PrintNightmare." Proof-of-concept exploits have been released Python, C++ for the remote code execution...
RegPwn
RegPwn Exploit para el artĆculo del blog - https://www.mdsec.co.uk/2026/03/rip-regpwn/ CĆ³digo de exploit para LPE en clientes y servidores Windows Versiones probadas: Windows 11 25h2 Windows 11 24h2 Windows 10 21h2 Windows Servers 2016/2019/2022 Rastreado como CVE-2026-24291 Autor: Filip Dragovic...
CVE-2021-34527
CVE-2021-34527 - PrintNightmare LPE PowerShell Caleb Stewart | John Hammond | June 1, 2021 UPDATE June 2 2021 : Microsoft has released an advisory on CVE-2021-34527, correctly terming that specific identifier as the PrintNightmare vulnerability exploit. Previously, the community was assuming...
CVE-2021-1675-CVE-2021-34527
CVE-2021-1675 - PrintNightmare LPE PowerShell Caleb Stewart | John Hammond | July 1, 2021 CVE-2021-1675 is a critical remote code execution and local privilege escalation vulnerability dubbed "PrintNightmare." Proof-of-concept exploits have been released Python, C++ for the remote code execution...
CVE-2021-34527
CVE-2021-34527 - PrintNightmare LPE PowerShell Caleb Stewart | John Hammond | June 1, 2021 UPDATE June 2 2021 : Microsoft has released an advisory on CVE-2021-34527, correctly terming that specific identifier as the PrintNightmare vulnerability exploit. Previously, the community was assuming...
CVE-2020-1350
CVE-2020-1350 CVE-2020-1350 Proof-of-Concept Environment Setup 1. Download Windows Server 2016 2. Download a Linux box a secondary box to run this script 3. Install Active Directory/DNS on Windows Server 2016 let's say you named your legitimate domain 33y0re.com 4. Have NO DNS records on the...
CVE-2019-0708
CVE-2019-0708 POC-CVE-2019-0708 Microsoft Windows 7 for 32-bit Systems SP1 Microsoft Windows 7 for x64-based Systems SP1 Microsoft Windows Server 2003 Microsoft Windows Server 2008 R2 for Itanium-based Systems SP1 Microsoft Windows Server 2008 R2 for x64-based Systems SP1 Microsoft Windows Server...
MS15-034
MS15-034 MS15-034 POC "The current IIS server version is a vulnerable version with a known vulnerability CVE-2015-1635, MS15-034. Exploiting this vulnerability poses a risk of remote code execution or causing a blue screen of death. Test command: wget --header=""Range:...
MS_T120
MST120 CVE-2019-0708 make the poc step by step, day by day https://docs.microsoft.com/en-us/openspecs/windowsprotocols/ms-rdpbcgr/5073f4ed-1e93-45e1-b039-6e30c385867c...
CVE-2023-28252-Compiled-exe
CVE-2023-28252-Compiled-exe A modification of Fortra's excellent CVE-2023-2852 Privesc Exploit. Works on Windows 11 21H2 clfs.sys version 10.0.22000.1574 - also works on Windows 10 21H2, Windows 10 22H2, Windows 11 22H2 and Windows server 2022. This version retains the original functionality, but...
GodPotato
GodPotato Based on the history of Potato privilege escalation for 6 years, from the beginning of RottenPotato to the end of JuicyPotatoNG, I discovered a new technology by researching DCOM, which enables privilege escalation in Windows 2012 - Windows 2022, now as long as you have...