rat-shell

Stories in Ready Windows 远程访问木马（RAT），使用 .NET Sockets 客户端-服务器二进制文件和源代码，用于在 Windows 中通过命令行 shell 控制 NAT 后面的远程计算机。虽然核心支持与多个 RAT 通信，但所使用的命令行界面在区分各个 RAT 方面能力有限。 RAT 进程可执行文件不会在任务栏或任务管理器中隐藏自身，因为它仅用于教育目的。请勿将其用于任何恶意用途。 包含源代码以及使用 ILMerge 打包的两个二进制文件。 使用说明： 1. 在命令行中启动服务器端，使其充当 RAT（Binaries\rat.exe）- rat...

libfwsi

libfwsi es una biblioteca para acceder al formato Windows Shell Item. Información del proyecto: Estado: experimental Licencia: LGPL-3.0-or-later Para más información, ver: Documentación del proyecto: https://github.com/libyal/libfwsi/wiki/Home Cómo compilar desde el código fuente:...

usbhijacking

CVE-2017-8464 PoC Windows Shell（Microsoft Windows Server 2008 SP2 和 R2 SP1、Windows 7 SP1、Windows 8、Windows 8.1、Windows Server 2012 Gold 和 R2、Windows RT 8.1、Windows 10 Gold、1511、1607、1703 以及 Windows Server 2016 中的组件）存在漏洞，允许本地用户或远程攻击者通过特制的 .LNK 文件执行任意代码。该文件在 Windows...

CVE-2026-32202

Disclaimer This tool is for authorized red teaming and penetration testing only. Unauthorized use against systems without explicit permission is illegal. Use at your own risk. The author assumes no liability for any misuse or damage. Description NTLMv2 hash coercion via incomplete Windows Shell...

CVE-2026-21510-CVSS-8.8-Important-Windows-Shell-security-feature-bypass

CVE-2026-21510 - Vulnerabilidad de Omisión de la Característica de Seguridad del Shell de Windows Sugerencia de Título del Repositorio: CVE-2026-21510-Windows-Shell-Bypass-Analysis Este README proporciona una visión general completa de CVE-2026-21510 , una vulnerabilidad de día cero de alta...

CVE-2024-1874

CVE-2024-1874 针对 CVE-2024-1874 的概念验证 通过 procopen 的类数组 $command 参数实现命令注入（绕过 CVE-2024-1874 修复） 该 CVE： 在 PHP 8.1.（8.1.29 之前）、8.2. （8.2.20 之前）、8.3.（8.3.8 之前）版本中，针对 CVE-2024-1874 的修复在命令名称包含尾随空格时无效。原始问题：当使用数组语法调用 procopen 命令时，由于转义不充分，如果被执行命令的参数受到恶意用户控制，则该用户可提供参数，从而在 Windows shell 中执行任意命令。 我已经用 Python 和...

OS Command Injection

@cyclonedx/cyclonedx-npm is vulnerable to OS Command Injection. The vulnerability is due to improper sanitization of the untrusted --workspace value when constructing a Windows shell command, which allows an attacker to inject shell metacharacters and execute arbitrary operating-system commands...

Microsoft Plugs Nearly 1,000 Security Holes

Microsoft Corp. today issued updates to plug at least 974 security holes in its Windows operating systems and other software, by far its biggest single patch batch ever. Microsoft says artificial intelligence is helping to speed the discovery of vulnerabilities, but security experts warn that man...

CVE-2026-70563

Improper link resolution before file access 'link following' in Windows Shell allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-69829

Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute code over a network...

CVE-2026-69606

Use after free in Windows Shell allows an authorized attacker to elevate privileges locally...

CVE-2026-69528

Missing authentication for critical function in Windows Shell allows an authorized attacker to elevate privileges locally...

CVE-2026-69392

Use after free in Windows Shell allows an authorized attacker to elevate privileges locally...

CVE-2026-69383

External control of file name or path in Windows Shell allows an authorized attacker to elevate privileges locally...

EUVD-2026-73691

Use after free in Windows Shell allows an authorized attacker to elevate privileges locally...

CVE-2026-69392

CVE-2026-69392 is a use-after-free vulnerability in Windows Shell that allows an authorized attacker to perform local privilege escalation . The CVSS 3.1 score is 7.8 (HIGH) , reflecting a local attack vector with high complexity, low privileges required, no user interaction, and a scope change l...

CVE-2026-69829

CVE-2026-69829 is a heap-based buffer overflow in Windows Shell that allows an unauthorized attacker to achieve remote code execution over a network . Microsoft's assigned CVSS 3.1 score is 9.8 (CRITICAL) , with an attack vector of Network, low complexity, no privileges required, and no user inte...

EUVD-2026-73629

Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute code over a network...

EUVD-2026-73549

Use after free in Windows Shell allows an authorized attacker to elevate privileges locally...

CVE-2026-69606

CVE-2026-69606 is a use-after-free vulnerability in Windows Shell that allows a local, low-privilege attacker to achieve local privilege elevation . The CVSS 3.1 score is 7.0 (HIGH) , with the vector CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating a local attack vector, high complexity, ...