DanderSpritz_lab

DanderSpritz Lab Purpose The goal of DanderSpritz lab is to allow researchers and defenders to quickly stand up a fully functional version of DanderSpritz - The Equation Group's Post exploitation tool-set and a Windows Server 2008 Domain and client as targets. The Windows target have some reverse...

CVE-2020-0796

CVE-2020-0796 SMBv3 RCE vulnerability in SMBv3 Windows 10 is vulnerable Windows 2008 Not vulnerable Detection Script...

ms09-050-CVE-2009-3103-exploit

MS09-050 SMBv2 Exploit Wrapper One-liner setup for MS09-050 CVE-2009-3103 exploitation. No fuss, no debugging, just works. Why? Most MS09-050 scripts floating around require manual shellcode injection, have timing issues with handlers, or just don't work. This wrapper: Generates shellcode with...

Explotacion-RCE-Pentesting-BlueKeep-CVE-2019-0708-

BlueKeep Vulnerability Exploitation CVE-2019-0708 in a Controlled Environment Academic project focused on the analysis, execution, and troubleshooting during the exploitation of the BlueKeep CVE-2019-0708 vulnerability in the RDP service of Windows Server 2008 R2, developed for the Cybersecurity...

MS12-020-CVE-2012-0002

https://github.com/xiaoxiaoleo/windows-kernel-exploits/blob/2892a653297ccbbab8b2690cf7c9e302d7ffe03f/MS12-020 https://max.book118.com/html/2016/0314/37644373.shtm https://github.com/JYanger/MS12-020-Check/blob/master/ms12-020one.py https://blog.csdn.net/qq73252299/article/details/133156450 صWindo...

Microsoft Support

Microsoft Support What do you need help with today? Microsoft Copilot Microsoft 365 Outlook OneDrive Microsoft Teams Windows Surface devices Gaming Microsoft account Microsoft Store More Microsoft products Start your Copilot journey here New to Copilot? Start with Chat Ask a question, draft...

Metasploitable3 Windows Environment

Metasploitable3 Windows Server 2008 R2 lab VM via Vagrant — intentionally vulnerable Windows target for authorized internal-lab agent benchmarks. !/usr/bin/env python3 -- coding: utf-8 -- from kittysploit import class ModuleVagrantEnvironment: info = "name": "Metasploitable3 Windows Environment",...

KB5061195: Windows Server 2008 R2 OOB Security Update (May 2025) (CVE-2025-32709)

The remote Windows host is missing a security update and is therefore affected by an elevation of privilege vulnerability: - Null pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. CVE-2025-32709 Note that Nessus has n...

KB5061197: Windows Server 2008 OOB Security Update (May 2025) (CVE-2025-32709)

The remote Windows host is missing a security update and is therefore affected by an elevation of privilege vulnerability: - Null pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. CVE-2025-32709 Note that Nessus has n...

comp5003-sweeny-pentest

COMP5003: Sweeny Barbers Penetration Test Full ethical hackin...

January 13, 2026—KB5073697 (Monthly Rollup)

January 13, 2026—KB5073697 Monthly Rollup Applies To Windows Server 2008 Premium Assurance Windows Secure Boot certificate expiration Important: Secure Boot certificates used by most Windows devices have started expiring in June 2026. This might affect the ability of certain personal and business...

January 13, 2026—KB5073700 (Security-only update)

January 13, 2026—KB5073700 Security-only update Applies To Windows Server 2008 Premium Assurance Windows Secure Boot certificate expiration Important: Secure Boot certificates used by most Windows devices have started expiring in June 2026. This might affect the ability of certain personal and...

Microsoft Windows Local Security Authority Subsystem Service code issue vulnerability

The Microsoft Windows Local Security Authority Subsystem Service is an internal Microsoft program that runs Windows system security policies. It authenticates users when they log on to a computer standalone or server, manages user password changes, and generates access characters. It also leaves...

Microsoft HTTP.Sys access control error vulnerability

Microsoft HTTP.sys is an HTTP application protocol from Microsoft Corporation USA. An access control error vulnerability exists in Microsoft HTTP.sys. An attacker could exploit the vulnerability to elevate privileges. The following products and versions are affected:Windows 10 Version 21H2 for...

Microsoft Windows Network Driver Interface Specification Buffer Error Vulnerability

The Microsoft Windows Network Driver Interface Specification is one of the core components of a Windows network architecture from Microsoft Corporation. A buffer error vulnerability exists in the Microsoft Windows Network Driver Interface Specification. An attacker could exploit this vulnerabilit...

December 18, 2025—KB5074979 (Monthly Rollup) Out-of-band

December 18, 2025—KB5074979 Monthly Rollup Out-of-band Applies To Windows Server 2008 Premium Assurance Windows Secure Boot certificate expiration Important: Secure Boot certificates used by most Windows devices have started expiring in June 2026. This might affect the ability of certain personal...

December 9, 2025—KB5071507 (Security-only update)

December 9, 2025—KB5071507 Security-only update Applies To Windows Server 2008 Premium Assurance Windows Secure Boot certificate expiration Important: Secure Boot certificates used by most Windows devices have started expiring in June 2026. This might affect the ability of certain personal and...

December 9, 2025—KB5071504 (Monthly Rollup)

December 9, 2025—KB5071504 Monthly Rollup Applies To Windows Server 2008 Premium Assurance Windows Secure Boot certificate expiration Important: Secure Boot certificates used by most Windows devices have started expiring in June 2026. This might affect the ability of certain personal and business...

November 11, 2025—KB5068909 (Security-only update)

November 11, 2025—KB5068909 Security-only update Applies To Windows Server 2008 Premium Assurance Windows Secure Boot certificate expiration Important: Secure Boot certificates used by most Windows devices have started expiring in June 2026. This might affect the ability of certain personal and...

November 11, 2025—KB5068906 (Monthly Rollup)

November 11, 2025—KB5068906 Monthly Rollup Applies To Windows Server 2008 Premium Assurance Windows Secure Boot certificate expiration Important: Secure Boot certificates used by most Windows devices have started expiring in June 2026. This might affect the ability of certain personal and busines...