124 matches found
Windows-Exploit-Suggester
描述 此工具将目标的补丁级别与微软漏洞数据库进行对比，以检测目标可能缺失的补丁。同时，它还会通知用户是否存在针对缺失公告的公开漏洞利用程序和Metasploit模块。 它需要Windows主机的'systeminfo'命令输出，以便与微软安全公告数据库进行比较，从而确定主机的补丁级别。 它能够使用--update标志自动从微软下载安全公告数据库，并将其保存为Excel电子表格。...
win-exp-
DESCRIPTION Esta herramienta compara los niveles de parches de un objetivo contra la base de datos de vulnerabilidades de Microsoft para detectar posibles parches faltantes en el objetivo. También notifica al usuario si hay exploits públicos y módulos de Metasploit disponibles para los boletines...
Windows-Exploit-Suggester-Python3
Windows-Exploit-Suggester-Python3 python3 windows-exploit-suggester.py --update libreoffice --headless --convert-to xls 2021-07-15-mssb.xlsx python3 windows-exploit-suggester.py --database 2021-07-15-mssb.xls --systeminfo systeminfo.txt Ejemplo : por lo que debemos convertir xlsx a xls...
cve-2023-36802
PoC para CVE-2023-36802 Exploit dirigido al controlador MSKSSRV.SYS. El exploit completo funciona en sistemas Windows 11 y 10 vulnerables. Nota Si tienes algún truco o consejo interesante que pueda mejorar este exploit, estoy abierto a sugerencias : Créditos Valentina Palmiotti @chompie1337 de IB...
Windows-exploitation-Rejetto-HTTP-File-Server-HFS-2.3.x-CVE-2014-6287
Este repositorio no tiene un README...
windows-exploit
windows-exploit windows-exploit is a Windows vulnerabilit...
Windows-exploit-suggester
windows-exploit-suggester.ps1 A local privilege-escalation L...
BlueMoon exploit kit turns Chrome and Windows flaws into attacks
BlueMoon, a shared Chrome and Windows exploit kit, shows why “patch later” is becoming a dangerous gamble. Security updates are easy to put off. The browser still opens, Windows still works, and choosing to relaunch your browser or restart your computer later can feel harmless. But a newly...
FTP Fetch, Windows x86 Reverse Named Pipe (SMB) Stager
Fetch and execute an x86 payload from an FTP server. Connect back to the attacker via a named pipe pivot Module Options...
CVE-2026-13844
Use after free in Updater in Google Chrome on Windows prior to 150.0.7871.47 allowed a local attacker to perform OS-level privilege escalation via a malicious file. Chromium security severity: High...
CVE-2026-58052
7-Zip for Windows through 26.01 fails to preserve the Mark-of-the-Web when extracting a crafted RAR5 archive, because its guard that suppresses an archive-supplied Zone.Identifier stream matches the exact name 'Zone.Identifier' while a RAR5 STM record named ':Zone.Identifier:$DATA' is not matched...
SUSE CVE-2024-52011
launch-editor allows users to open files with line numbers in editor from Node.js. Prior to version 2.9.0, due to the insufficient sanitization of the file argument in the launchEditor, an attacker can execute arbitrary commands on Windows by supplying a filename that contains special characters...
Win32-Exploit-Dev-Labs-Vulnserver-
Win32 Exploit Dev Series: Vol. 1 Vulnserver This repository...
Exploit for CVE-2026-33824
Windows IKEv2 Double-Free RCE CVE-2026-33824 Remote code ex...
CVE-2026-6361
Heap buffer overflow in PDFium in Google Chrome on Windows prior to 147.0.7727.101 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code inside a sandbox via a crafted PDF file. Chromium security severity: High...
HTTPS Fetch, Windows Reverse HTTP Stager (winhttp)
Fetch and execute an x86 payload from an HTTPS server. Tunnel communication over HTTP Windows winhttp Module Options msf use payload/cmd/windows/https/x86/meterpreter/reversewinhttp msf payloadreversewinhttp show actions ...actions... msf payloadreversewinhttp set ACTION msf payloadreversewinhttp...
TFM-POC-Dynamic-MEM-Windows
TFM...
CVE-2020-37000 Free MP3 CD Ripper 2.8 - Stack Buffer Overflow (SEH + Egghunter)
Free MP3 CD Ripper 2.8 contains a stack buffer overflow vulnerability that allows remote attackers to execute arbitrary code by crafting a malicious WAV file with oversized payload. Attackers can leverage a specially crafted exploit file with shellcode, SEH bypass, and egghunter technique to...