121 matches found
win-exp-
विवरण यह उपकरण किसी लक्ष्य के पैच स्तरों की तुलना Microsoft भेद्यता डेटाबेस से करता है, ताकि लक्ष्य पर संभावित लापता पैच का पता लगाया जा सके। यह उपयोगकर्ता को यह भी सूचित करता है कि क्या लापता बुलेटिन के लिए सार्वजनिक एक्सप्लॉइट और Metasploit मॉड्यूल उपलब्ध हैं। इसे किसी Windows होस्ट से...
Windows-Exploit-Suggester-Python3
Windows-Exploit-Suggester-Python3 python3 windows-exploit-suggester.py --update libreoffice --headless --convert-to xls 2021-07-15-mssb.xlsx python3 windows-exploit-suggester.py --database 2021-07-15-mssb.xls --systeminfo systeminfo.txt Exemplo: então devemos converter xlsx para xls...
cve-2023-36802
PoC pour CVE-2023-36802 Exploit ciblant le pilote MSKSSRV.SYS. L'exploit complet fonctionne sur les systèmes Windows 11 et 10 vulnérables. Remarque Si vous avez des astuces et conseils sympas qui pourraient améliorer cet exploit, je suis ouvert à toute suggestion : Crédits Valentina Palmiotti...
Windows-Exploit-Suggester
DESCRIPTION Questo strumento confronta i livelli di patch di un target con il database delle vulnerabilità Microsoft per rilevare potenziali patch mancanti sul target. Notifica inoltre all'utente se sono disponibili exploit pubblici e moduli Metasploit per i bollettini mancanti. Richiede l'output...
Windows-exploitation-Rejetto-HTTP-File-Server-HFS-2.3.x-CVE-2014-6287
Questo repository non contiene un README...
FTP Fetch, Windows x86 Reverse Named Pipe (SMB) Stager
Fetch and execute an x86 payload from an FTP server. Connect back to the attacker via a named pipe pivot Module Options...
CVE-2026-13844
Use after free in Updater in Google Chrome on Windows prior to 150.0.7871.47 allowed a local attacker to perform OS-level privilege escalation via a malicious file. Chromium security severity: High...
CVE-2026-58052
7-Zip for Windows through 26.01 fails to preserve the Mark-of-the-Web when extracting a crafted RAR5 archive, because its guard that suppresses an archive-supplied Zone.Identifier stream matches the exact name 'Zone.Identifier' while a RAR5 STM record named ':Zone.Identifier:$DATA' is not matched...
SUSE CVE-2024-52011
launch-editor allows users to open files with line numbers in editor from Node.js. Prior to version 2.9.0, due to the insufficient sanitization of the file argument in the launchEditor, an attacker can execute arbitrary commands on Windows by supplying a filename that contains special characters...
Win32-Exploit-Dev-Labs-Vulnserver-
Win32 Exploit Dev Series: Vol. 1 Vulnserver This repository...
Exploit for CVE-2026-33824
Windows IKEv2 Double-Free RCE CVE-2026-33824 Remote code ex...
CVE-2026-6361
Heap buffer overflow in PDFium in Google Chrome on Windows prior to 147.0.7727.101 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code inside a sandbox via a crafted PDF file. Chromium security severity: High...
HTTPS Fetch, Windows Reverse HTTP Stager (winhttp)
Fetch and execute an x86 payload from an HTTPS server. Tunnel communication over HTTP Windows winhttp Module Options msf use payload/cmd/windows/https/x86/meterpreter/reversewinhttp msf payloadreversewinhttp show actions ...actions... msf payloadreversewinhttp set ACTION msf payloadreversewinhttp...
TFM-POC-Dynamic-MEM-Windows
TFM...
CVE-2020-37000 Free MP3 CD Ripper 2.8 - Stack Buffer Overflow (SEH + Egghunter)
Free MP3 CD Ripper 2.8 contains a stack buffer overflow vulnerability that allows remote attackers to execute arbitrary code by crafting a malicious WAV file with oversized payload. Attackers can leverage a specially crafted exploit file with shellcode, SEH bypass, and egghunter technique to...
Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Hp Power_Manager
CVE-2009-3999 HP Power Manager 4.2 Build 7 exploit inspire...
Exploit for Use of Client-Side Authentication in Necta Wifi_Mouse_Server
Paso 1 — Crear un payload REAL Windows msfvenom -p windows/x6...
Exploit for Out-of-bounds Write in Microsoft
Contents General Introduction This was made to clarify gen...
