CVE-2017-12615

CVE-2017-12615 - Apache Tomcat दूरस्थ कोड निष्पादन RCE CVE-2017-12615 एक दूरस्थ कोड निष्पादन RCE भेद्यता है जो Apache Tomcat 7.0.0 से 7.0.79 को प्रभावित करती है जो Microsoft Windows पर चल रहा है जब HTTP PUT अनुरोध सक्षम होते हैं। यह भेद्यता इसलिए मौजूद है क्योंकि Tomcat अपलोड की गई JSP फ़ाइलों को...

From-Foothold-to-Domain-Admin-Weaponizing-CVE-2025-54918-in-Real-World-DevOps

From-Foothold-to-Domain-Admin-Weaponizing-CVE-2025-54918-in-Real-World-DevOps Simulated exploitation and mitigation of CVE-2025-54918 Windows NTLM flaw. Includes detection scripts, Ansible patching, and CI/CD hardening. Demonstrates privilege escalation from low-level access to SYSTEM in hybrid...

lenovo-dispatcher-poc

Lenovo Dispatcher PoC This is a basic proof of concept to exploit lenovo dispatcher driver LnvMSRIO.sys CVE-2025-8061. Vulnerabilities found by Luis Casvella source: https://blog.quarkslab.com/exploiting-lenovo-driver-cve-2025-8061.html. The main idea of this poc is to exploit the read/write...

BlueKeep

Bluekeep PoC This repo contains research concerning CVE-2019-0708. Bluekeep or CVE-2019-0708 is an RCE exploit that effects the following versions of Windows systems: Windows 2003 Windows XP Windows Vista Windows 7 Windows Server 2008 Windows Server 2008 R2 The vulnerability occurs during...

MiniPlasma

MiniPlasma After re-investigating the technique used in GreenPlasma specifically SetPolicyVal, it turns out cldflt!HsmOsBlockPlaceholderAccess is still vulnerable to the exact same issue that was reported to Microsoft 6 years ago. I'm not taking full credit for this, James Forshaw from google...

ThrottleStopPPL

ThrottleStopPPL A proof-of-concept tool for managing Protected Process Light PPL protection levels on Windows Server 2022 by exploiting vulnerabilities in the ThrottleStop driver CVE-2025-7771. Overview This tool demonstrates privilege escalation through arbitrary physical memory read/write...

CVE-2026-33825

🔵 CVE-2026-33825 — “BlueHammer” 🔵 Microsoft Defender स्थानीय विशेषाधिकार वृद्धि LPE BlueHammer एक उच्च-गंभीरता वाली स्थानीय विशेषाधिकार वृद्धि भेद्यता है जो विंडोज सिस्टम पर Microsoft Defender घटकों को प्रभावित करती है। यह दोष एक कम-विशेषाधिकार वाले हमलावर को फ़ाइल सिस्टम रेस स्थितियों और...

legacyshield-CVE-2017-0144

LegacyShield — EternalBlue Module A Windows desktop security application that provides a defensive compensating control for systems still exposed to CVE-2017-0144 MS17-010 / EternalBlue — most commonly legacy or unsupported Windows installations that can no longer receive official Microsoft...

CVE-2026-41089

🚨 CVE-2026-41089 - गंभीर Windows Netlogon दूरस्थ कोड निष्पादन RCE ⚠️ एक गंभीर Windows Netlogon कमजोरी जो डोमेन नियंत्रकों पर बिना प्रमाणीकरण के दूरस्थ कोड निष्पादन की अनुमति देती है। 📖 अवलोकन CVE-2026-41089 एक गंभीर कमजोरी है जो Windows Netlogon सेवा को प्रभावित करती है। यह दोष स्टैक-आधारित बफ़र...

Preproduce-CVE-2019-0232

CVE-2019-0232 - Apache Tomcat CGI Servlet Remote Code Execution This repository provides a Docker-based lab environment to reproduce the CVE-2019-0232 vulnerability in Apache Tomcat 9.0.17 on Windows. Vulnerability Overview CVE-2019-0232 is a remote code execution vulnerability in the Apache Tomc...

CVE-2025-21333

CVE-2025-21333 Hyper-V NT Kernel Integration VSP vkrnlintvsp.sys Paged Pool heap overflow → Local Privilege Escalation LPE. This directory contains lab PoC source code based on MrAle98/CVE-2025-21333-POC, including a local patch. 1. Vulnerability Summary Item| Content ---|--- CVE| CVE-2025-21333...

hacking-team-windows-kernel-lpe

This an exploit for CVE-2015-2426 MS-078, a Windows kernel local privilege escalation 0day from the Hacking Team archive email here. It was developed by Eugene Ching / Qavar security. Original contents below: Summary. Windows kernel memory corruption exploit leading to privilege escalation. Teste...

UAC-bypass

UAC-bypass Please note: It is a Proof of Concept and is not intended for illegal usage! Visit my website: https://winscripting.blog/ Please donate to this Bitcoin address if you find this PoC helpful: 12WN3fHmr5EB2Y5cDbKAgTDYMo5d1b1AUu alt text...

microsoft-cve-2021-1675

!IMPORTANT "This repo is now in 'Blue Screen' mode-archived and frozen in time!" Microsoft-CVE-2021-1675 I have created a small C project that exploits vulnerability CVE-2021-1675. For more information about CVE-2021-1675, please check my blog post:...

cve-2024-4577-lab

Environment Blueprint root@kitploit: कंटेनर ऑपरेटिंग सिस्टम: ubuntu:22.04 Windows WSL2 के अंतर्गत चल रहा है। वेब सर्वर लेयर: Apache2 जिसमें modactions, modcgi, और modcgid को मुख्य apache2.conf में वैश्विक रूप से सक्षम किया गया है। भाषा इंटरप्रेटर: PHP 8.1.2, जो सख्ती से CGI/FastCGI मोड Server API...

CVE-Writeups

CVE-Writeups Security vulnerability research writeups. CVE-2026-50402: Windows NTFS Elevation of Privilege CVSS 7.8...

DNS-Mayhem-CVE-2026-41096-Deep-Dive

DNS-Mayhem-CVE-2026-41096-Deep-Dive In‑depth technical analysis of CVE‑2026‑41096, a critical heap overflow in Windows DNSAPI.dll enabling remote code execution via crafted DNS responses. Includes attack vectors, patch insights, and defensive guidance for security teams. Overview CVE‑2026‑41096 i...

HVCIPwned

CVE-2024-35250 Local privilege escalation via untrusted pointer dereference in Windows Kernel Streaming driver ks.sys. Data-only exploit — bypasses Hypervisor-protected Code Integrity HVCI. Summary Field| Detail ---|--- CVE| CVE-2024-35250 Component| ks.sys Kernel Streaming Bug Class| Untrusted...

CVE-2026-54424

CVE-2026-54424 Exploiting Parsec for Windows versions 150-104a to gain: Remote code execution as SYSTEM Arbitrary file read as SYSTEM NTLM hash capture for SYSTEM The exploits stem from the same vulnerability, but the actual paths diverge. Technical writeup:...

CVE-2023-38146-Poc

PoC for the ThemeBleed CVE-2023-38146 exploit Windows 11 Themes Heavily inspired by https://github.com/gabe-k/themebleed which only runs on windows the reason why i decided to write this. Used modified code from the impacket smbserver.py...