CVE-2023-37800

Unquoted-Service Path in the Fortect - 5.0.0.7 - CVE-2023-37800 Unquoted Service Path in the Fortect - 5.0.0.7 Discoverer: Idan Malihi Description The component MainService.exe is vulnerable to unquoted service path: C:\Program Files\Fortect\MainService.exe Steps to Reproduce To exploit the...

CVE-2016-7255

CVE-2016-7255 The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allow local users to gain privileges via a crafted...

RtlHijack

RtlHijack A repository with scripts to demonstrate alternative Read and Write primitives using Rtl functions the unintended way. RtlFillMemory.c RtlFillMemory takes three arguments: a pointer to the destination memory, the number of bytes to write, and a single byte value. Writes only a byte into...

cve-2020-0601_poc

Basic Info The source code of this tool is supposed to help with understanding of CVE-2020-0601 vulnerability discovered in Windows Crypto API, see CERT's overview. The tool itself can be used to produce a certificate for an arbitrary domain which will be signed by an evil certificate authority...

AMSIext

AMSIext AMSIext is a Firefox and Chrome plugin that allows you to send any data stream from the browser to AMSI. AMSI is the way to communicate RAM memory with Windows Defender or any other endpoint security system. This means that while browsing the web, AMSIext will alert you to malicious...

raven

Raven CobaltStrike External C2 for Websockets Additional info: https://www.cobaltstrike.com/help-externalc2 Server Build Ubuntu Copy the server folder to your VPS. Run ./setup.sh as root or with sudo Client build Windows Copy the client folder to a Windows development host. Install the Windows 10...

Preproduce-CVE-2019-0232

CVE-2019-0232 - Apache Tomcat CGI Servlet Remote Code Execution This repository provides a Docker-based lab environment to reproduce the CVE-2019-0232 vulnerability in Apache Tomcat 9.0.17 on Windows. Vulnerability Overview CVE-2019-0232 is a remote code execution vulnerability in the Apache Tomc...

ctftool

CTFTOOL ¿Solo quieres probar el exploit SYSTEM? Haz clic aquí. Una herramienta interactiva de exploración de CTF Esto es ctftool, una herramienta interactiva de línea de comandos para experimentar con CTF, un protocolo poco conocido utilizado en Windows para implementar servicios de texto. Esto...

CVE-2020-17008

CVE-2020-17008 splWOW64 Elevation of Privilege C:\Windows\splwow64.exe Poc From: https://bugs.chromium.org/p/project-zero/issues/detail?id=2096 0x01 set splwow64poc.exe Low cd splwow64poc\x64\Release icacls splwow64poc.exe /setintegritylevel L root@kitploit: /setintegritylevel CIOI级别将完整性 ACE 显式...

trevorc2

trevorc2 TrevorC2 - Command and Control via Legitimate Behavior over HTTP Written by: Dave Kennedy @HackingDave Website: https://www.trustedsec.com Note that this is a very early release - heavy randomization and encryption to be added soon. TrevorC2 is a client/server model for masking command a...

CVE-2017-0108

The Windows Graphics Component in Microsoft Office 2007 SP3; 2010 SP2; and Word Viewer; Skype for Business 2016; Lync 2013 SP1; Lync 2010; Live Meeting 2007; Silverlight 5; Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; and Windows 7 SP1 allows remote attackers to execute arbitrary code v...

CVE-2019-0232

CVE-2019-0232 Vulnerability analysis and PoC for the Apache Tomcat - CGIServlet enableCmdLineArguments Remote Code Execution RCE Video PoC available at https://www.youtube.com/watch?v=RA7kzuHOWqA Details Apache Tomcat has a vulnerability in the CGI Servlet, which can be exploited to achieve remot...

CVE-2021-31728

CVE-2021-31727 y CVE-2021-31728 Referencia pública para CVE-2021-31727 Expone capacidades de lectura/escritura de disco sin restricciones. Referencia pública para CVE-2021-31728 Expone ejecución arbitraria de código en ring 0 directamente. Créditos Lima X ayudó con la idea de...

pyrexecd

PyRexecd PyRexecd 是一个用于 Windows 的独立 SSH 服务器。 功能： 独立的 Win32 应用程序（非服务），驻留在系统托盘中。 仅支持单一用户/公钥认证。 通过弹出窗口通知传入连接。 通过 stdin/stdout 发送/接收剪贴板文本。 PyPI 项目页面：https://pypi.python.org/pypi/PyRexecd/ 前提条件： Python 3 - http://www.python.org/ Paramiko - http://www.paramiko.org/ PyWin32 -...

CVE-2020-1337

CVE-2020-1337 CVE-2020-1337 es un bypass del parche de PrintDemon CVE-2020-1048 mediante un Directorio de Unión, creado para remediar una vulnerabilidad de Elevación de Privilegios EoP\Escalada Local de Privilegios LPE que afecta al Servicio de Cola de Impresión de Windows. La vulnerabilidad sí...

CVE-2024-1642470

Windows USB Generic Parent Driver Remote Code Execution Vulnerability CVE-2024-1642470 Overview This repository contains a proof-of-concept PoC exploit code and a detection script for the Windows USB Generic Parent Driver Remote Code Execution Vulnerability, identified as CVE-2024-1642470...

CVE-2017-12615

CVE-2017-12615 - Ejecución remota de código RCE en Apache Tomcat CVE-2017-12615 es una vulnerabilidad de ejecución remota de código RCE que afecta a Apache Tomcat 7.0.0 hasta 7.0.79 que se ejecuta en Microsoft Windows cuando las solicitudes HTTP PUT están habilitadas. La vulnerabilidad existe...

CVE-2019-1132

CVE-2019-1132 EoP POC for CVE-2019-1132 This exploit is tested on Windows 7 x86 build 7601 With June Patch installed...

CVE-2019-0803

CVE-2019-0803 Win32k Elevation of Privilege Poc Screenshot Reference steal Security token https://github.com/mwrlabs/CVE-2016-7255...

CVE-2023-20178

CVE-2023-20178 This is PoC for Arbitrary File Delete vulnerability in Cisco Secure Client tested on 5.0.01242 and Cisco AnyConnect tested on 4.10.06079. When a user connect to vpn, vpndownloader.exe process is started in background and it will create directory in c:\windows\temp with default...