badsuccessor

BadSuccessor.py Windows Server 2025 Active Directory 環境における dMSA（委任管理サービスアカウント）権限昇格の脆弱性を悪用するペネトレーションテストツール。 ⚠️ 法的免責事項 このツールは、許可を得たペネトレーションテストおよびセキュリティ研究目的のみで使用すること。 明示的な書面による許可なくシステムに対してこのツールを使用することは、違法かつ非倫理的です。作者は、このツールの誤用または損害について一切の責任を負いません。 ⚠️ 開発ステータスおよび環境テストに関する免責事項 重要：このツールは活発に開発およびテスト中です。...

CVE-2024-38077

CVE-2024-38077-EXP Código corrigido baseado em pseudocódigo. Alcance Válido EXP: Windows Server 2025 POC: 08-25 Uso root@kitploit: options: -h, --help show this help message and exit --targetip TARGETIP Target IP, eg: 192.168.120.1 --evilip EVILIP Evil IP, eg: 192.168.120.2 --evildllpath...

CVE-2025-30397---Windows-Server-2025-JScript-RCE-Use-After-Free-

CVE-2025-30397---Windows-Server-2025-JScript-RCE-Use-After-Free Execução Remota de Código via Use-After-Free em JScript.dll CVE-2025-30397 🧠 Descrição Este repositório contém um exploit de prova de conceito PoC para uma vulnerabilidade Use-After-Free no mecanismo JScript jscript.dll que afeta o...

CVE-2026-24294

CVE-2026-24294 - Escalatazione Locale dei Privilegi tramite Riflessione NTLM via Porta Arbitraria SMB Escalatazione locale dei privilegi su Windows Server 2025 tramite riflessione NTLM, sfruttando la funzionalità di porta arbitraria SMB introdotta in Windows 11 24H2 / Server 2025. Vulnerabilità...

CVE-2025-54918-POC

CVE-2025-54918 – Proof of Concept PoC ⚠️ Wichtiger Hinweis WICHTIG: Um CVE-2025-54918 zu testen, müssen Sie einen DNS-Eintrag in der Ziel-Active-Directory-Umgebung erstellen. Konsultieren Sie stets den Kunden und holen Sie ausdrückliche Genehmigung ein, bevor Sie testen, da dies das DNS- und...

CVE-2026-40369

🚨 CVE-2026-40369 - विंडोज कर्नेल विशेषाधिकार उन्नति भेद्यता विंडोज कर्नेल हीप-आधारित बफर ओवरफ्लो जो स्थानीय हमलावरों को विशेषाधिकारों कोNT AUTHORITY\SYSTEM तक बढ़ाने की अनुमति देता है। 📖 अवलोकन CVE-2026-40369 एक उच्च गंभीरता वाली विशेषाधिकार उन्नति भेद्यता है जो माइक्रोसॉफ्ट विंडोज कर्नेल घटकों क...

azure-vulnerability-remediation-project

Ricerca e Mitigazione delle Vulnerabilità: Infrastruttura Cloud Azure Panoramica del Progetto Questo progetto documenta l'intero ciclo di vita della gestione delle vulnerabilità per un'istanza Windows Server 2025 ospitata nel cloud CyberVM. Il laboratorio dimostra un approccio proattivo per...

ShieldBreak

ShieldBreak – Windows Defender 0-Day-Schwachstelle Microsoft hat es versäumt, die RoguePlanet-Schwachstelle CVE-2026-50656 ordnungsgemäß zu patchen; dieser PoC demonstriert einen vollständigen Patch-Bypass. Der PoC wurde mit der neuesten Version von Windows 11 25H2 +Canary-Kanal und Windows Serve...

Windows 11 24H2/25H2 | Server 2025 - Recovery Media Restore Fails with: The Local Security Authority cannot be contacted

Challenge When attempting to perform a restore using the Veeam Recovery Media, the restore fails while establishing the connection to the local VeeamAgent.exe process, and the following error occurs: The Local Security Authority cannot be contacted Because the failure occurs before a recovery...

KB5099536: Windows Server 2025 Security Update (July 2026)

The remote Windows host is missing security update 5099536. It is, therefore, affected by multiple vulnerabilities - Integer overflow or wraparound in Windows RDP allows an unauthorized attacker to execute code over a network. CVE-2026-58594 - Heap-based buffer overflow in Windows FTP Service...

May 12, 2026—KB5087539(OS Build 26100.32860)

None None...

June 9, 2026—KB5094125 (OS Build 26100.32995)

None None...

Microsoft Windows Ancillary Function Driver for WinSock 竞争条件问题漏洞

The Microsoft Windows Ancillary Function Driver for WinSock is a compatibility issue vulnerability in Winsock by Microsoft Corporation. Attackers can exploit this vulnerability to gain elevated privileges. The following products and versions are affected: Windows Server 2012 R2 Server Core...

Microsoft Windows TCP/IP 缓冲区错误漏洞

Microsoft Windows TCP/IP is a component provided by Microsoft Corporation that offers TCP/IP configuration functions for Windows. There are security vulnerabilities present in Microsoft Windows TCP/IP. The following products and versions are affected: Windows Server 2022, Windows Server 2022 Serv...

Microsoft Windows Deployment Services 资源管理错误漏洞

Microsoft Windows Deployment Services are a container for Windows deployment services an updated and redesigned version of Remote Installation Services RIS provided by Microsoft Corporation. These services allow for the setup of new computers through network-based unattended installations...

microsoft windows kerberos 缓冲区错误漏洞

Microsoft Windows Kerberos is a software developed by Microsoft for authentication in network clusters. As a network authentication protocol, its primary goal is to provide robust authentication services for client/server applications through a key system. There is a buffer error vulnerability...

Microsoft Active Directory Domain Services 缓冲区错误漏洞

Microsoft Active Directory Domain Services is a key service provided by Microsoft Corporation in the United States. It is used to manage and organize resources, users, computers, and other security objects within a network. There are security vulnerabilities associated with Microsoft Active...

Microsoft Windows Secure Boot 权限许可和访问控制问题漏洞

Microsoft Windows Secure Boot is a security boot mechanism developed by Microsoft Corporation. There is an access control error vulnerability in Microsoft Windows Secure Boot. Attackers can exploit this vulnerability to bypass certain features. The following products and versions are affected:...

Microsoft Windows SDK 数字错误漏洞

Microsoft Windows is an operating system used by personal devices by the American company Microsoft. There is a vulnerability in input validation of Microsoft Windows. Attackers can exploit this vulnerability to gain higher privileges. The following products and versions are affected: Windows 11...

Microsoft Windows Push Notifications 竞争条件问题漏洞

Microsoft Windows Push Notifications is a push notification service provided by the American company Microsoft. It provides a reliable way to deliver new updates. There are compatibility issues with Microsoft Windows Push Notifications. The following products and versions are affected: Windows...