225279 matches found
zer0dump
Zer0Dump Zer0dump 是一个概念验证漏洞利用/工具，用于滥用与 CVE-2020-1472（Zerologon）相关的漏洞，以对未打补丁的 Windows 域控制器发起完全系统接管。 特别感谢 @dirkjanm 和 @SecureAuthCorp...
PrintNotifyPotato
PrintNotifyPotato PrintNotifyPotato Another potato, using PrintNotify COM service for lifting rights For Windows 10 - 11 Windows Server 2012 - 2022 Usege root@kitploit: C:\Windows\Temp PrintNotifyPotato.exe aaaa aaa aaa aaaa aaa aaa aaaa aaa aaa aaaa aaa aaa aaaa aaa aaa aaaa aaa aaa aaaa aaa...
ManualRsrcDataFetching
ManualRsrcDataFetching: one function to replace FindResource & LoadResource & LockResource & SizeofResource windows apis. Note: Payload.ico is a x64 calc shellcode...
SMBRat
SMBRat A Windows Remote Administration Tool in Visual Basic Script Idea Windows Environments like Active Directory Networks, get really bloated with SMB traffic. All hosts get Policies from the SYSVOL , configurations need remote files to work, desktop shortcuts tend to point to...
CVE-2024-20666
CVE-2024-20666 Vulnerability Patch Guide Welcome to the repository for addressing the CVE-2024-20666 vulnerability patch failures in the Windows Recovery Environment WinRE. Overview This repository provides resources and instructions to resolve patch failures related to the Windows OS update...
cve-2022-32223
CVE-2022-32223 Source files for generating a demonstration exploit of CVE-2022-32223: Node.js is vulnerable to Hijack Execution Flow: DLL Hijacking under certain conditions on Windows platforms. This vulnerability can be exploited if the victim has the following dependencies on a Windows machine:...
CVE-2022-45770
CVE-2022-45770 Description Improper input validation in driver adgnetworkwfpdrv.sys in Adguard For Windows x86 up to version 7.11 allows attacker to gain local privileges escalation. CVSS score 7.8 AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H References https://cve.report/CVE-2022-45770...
CVE-2024-6769
Entrada de blog: CVE-2024-6769 Envenenando la caché de activación para elevar de integridad media a alta Este blog trata sobre dos bugs encadenados: la primera etapa es un bug de secuestro de DLL causado por el remapeo de la unidad ROOT y la segunda es un bug de envenenamiento de la caché de...
CVE-2024-4577-RCE-PoC
CVE-2024-4577 RCE Exploit While implementing PHP, the team did not notice the Best-Fit feature of encoding conversion within the Windows operating system. This oversight allows unauthenticated attackers to bypass the previous protection of CVE-2012-1823 by specific character sequences. Arbitrary...
CVE-2019-0708
CVE-2019-0708 BlueKeep pre-auth RCE POC on Windows7 This repository demonstrates the remote code execution bug in Windows Remote Desktop Services RDS. Here is a POC code and technical report about BlueKeep vulnerability, which we developed before. NOTE: Our goal is helping analysts to get better...
CVE-2021-21551
CVE-2021-21551 Proof of concept exploit for CVE-2021-21551, vulnerability comes from user provided addresses being provided as arguments to a memmove call allowing for an arbitary read/write ioctls 0x9B0C1EC4 and 0x9B0C1EC8 as well as the physical address parameter for a MmMapIoSpace call that...
Get-ReconInfo
Get-ReconInfo root@kitploit: NAME Get-ReconInfo SYNOPSIS Lists connections and relevant info about a system Author: Chris King @raikiasec SYNTAX Get-ReconInfo DESCRIPTION This script runs the following commands on the local system, parses the output, and prints the results to the screen: netstat...
vulnerability-remediation-cve-2013-3900
🛡️ Remediación de CVE-2013-3900: Validación de Firmas WinVerifyTrust 📝 Resumen del Proyecto Este proyecto demuestra un Flujo de Trabajo de Gestión de Vulnerabilidades del mundo real. Usando una VM de Azure, rastreé una falla de validación de firmas de alta severidad, la confirmé manualmente con...
CVE-2020-27955
Git-lfs Remote Code Execution RCE exploit CVE-2020-27955 .bat / powershell version Vulnerable: git, GitHub CLI gh, GitHub Desktop, Visual Studio Code, SourceTree, SmartGit, GitKraken etc. Discovered by Dawid Golunski https://legalhackers.com https://exploitbox.io Tested on Windows on: git, GitHub...
CVE-2024-38063
CVE-2024-38063 - Remotely Exploiting The Kernel Via IPv6 Since the latest Windows patch dropped on the 13th of August I’ve been deep in the weeds of tcpip.sys the kernel driver responsible for handling TCP/IP packets. A vulnerability with a 9.8 CVSS score in the most easily reachable part of the...
Filedumper
FileDumper - Memory Forensic Dumper FileDumper v1.0.1 A simple, powerful tool to dump files directly from process memory regions. Created in a late-night collaboration between human ingenuity and AI creativity — xAI's Grok + Kadir Isbirligi 2026 "Bir gece sohbet ettik, kod yazdık, masaya yumruk...
CVE-2020-1472-LAB
ZeroLogon testing script A lab setup to test a vulnerability for the ZeroLogon exploit CVE-2020-1472. It contains a Python script that uses the Impacket library to test the vulnerability, and a Virtual Machine VM with Windows Server 2019 configured as a Domain Controller DC. The script attempts t...
CVE-2023-21768
Exploit with IO Rings for CVE-2023-21768 Tested on Windows 22H2 22621.963...