WinRE-Patch

WinRE-Patch Patches CVE-2022-41099 Original: https://github.com/halsey51013/UpdateWindowsRE-CVE-2022-41099...

CVE-2016-0051

Proof-of-concept BSoD Blue Screen of Death and Elevation of Privilege to SYSTEM code for my CVE-2016-0051 MS-016. vulnerabilty poc auhor: koczkatamas https://twitter.com/koczkatamas Original code: https://github.com/koczkatamas/CVE-2016-0051 Thanks to koczkatamas this PoC will run from CMD and th...

AnySniff

💀AnySniff AnySniff is a tool for monitoring TCP connections of processes like AnyDesk on Windows. It uses the CVE-2024-52940 vulnerability to track open connections and log IPs, ports, and other relevant details. ⚙Features Monitors TCP connections of targeted processes e.g., AnyDesk. Logs IP...

CVE-2025-24071

CVE-2025-24071 Windows File Explorer Spoofing Vulnerability - CVE-2025-24071 Leak the NTLM hash of Windows through the extraction of a manipulated ZIP or RAR file, and by exploiting a vulnerability in the handling of .library-ms files a type of file used by Windows to specify libraries and networ...

ble_proxy

BLE HTTP Proxy System A Bluetooth Low Energy BLE based HTTP proxy system that routes web browser traffic through an iOS device. This allows web browsing through the iOS device's internet connection using BLE as the transport layer. Architecture Overview root@kitploit: Browser → Windows Proxy →...

CVE-2026-46442-PoC

CVE-2026-46442 Proof of Concept Academic & Defensive Research Notice This repository contains a proof-of-concept PoC developed strictly for academic analysis, defensive research, and vulnerability validation purposes. The objective of this project is to help security researchers, defenders, and...

CVE-2020-11107

CVE-2020-11107 Este es un writeup de la CVE-2020-11107 que encontré. Se descubrió un problema en XAMPP anterior a 7.2.29, 7.3.x anterior a 7.3.16 y 7.4.x anterior a 7.4.4 en Windows. Un usuario sin privilegios puede cambiar una configuración de .exe en xampp-contol.ini para todos los usuarios...

CVE-2020-0787

CVE-2020-0787（named pipe） It's Just A Demo,Do not use in real. -Get result for Command executionUse cmd /c： exp.exe "cmd /c whoami \\.\pipe\showme " show -Run beacon.exe： exp.exe "C:/beacon.exe" For CobaltStrike It's better one than current project:...

Recreate-cve-2023-21768

Causa: Al comparar AFD.sys de 202209 y 202307, en la función AfdNotifyRemoveIOCompletion, tanto la versión de Windows de 202209 como la de 202307 tienen un paso que usa la función ProbeForWrite para verificar si una región de memoria está en modo usuario, pero la dirección del buffer verificada...

CVE-2024-43451-POC

Description Name : CVE-2024-43451 CVSSv3 Score : 6.5 Affected Versions : All Microsoft Windows versions before the Nov 2024 Patch CVE-2024-43451 is a zero-day vulnerability in Microsoft Windows that allows attackers to capture NTLMv2 password hashes with minimal interaction from the user,...

CVE-2019-0708-Exploit

CVE-2019-0708-Exploit Using CVE-2019-0708 to Locally Promote Privileges in Windows 10 System...

ThrottleStopPPL

ThrottleStopPPL A proof-of-concept tool for managing Protected Process Light PPL protection levels on Windows Server 2022 by exploiting vulnerabilities in the ThrottleStop driver CVE-2025-7771. Overview This tool demonstrates privilege escalation through arbitrary physical memory read/write...

malware_training_vol1

malwaretrainingvol1 Materiales para el entrenamiento de análisis de malware en Windows volumen 1 🚧 ADVERTENCIA: ¡trabajo en progreso! Se añadirá más material gradualmente. Contenido El objetivo de este entrenamiento es desarrollar la comprensión de diversas técnicas comunes utilizadas por el...

CVE-2022-23909

CVE-2022-23909 Description: On Windows, the Sherpa Connector Service version 2020.2.20328.2050 contains an unquoted service path vulnerability, allowing locally authenticated users with administrative privileges to run malicious executables with LocalSystem privileges. In case of a poorly...

peafl64

Overview peafl64 is a static instrumentation tool for x64 PEs in Windows. Static instrumentation is the practice of editing executable files and adding code to specific locations in them. The instrumentation adds code to the start of every basic block in the binary, logging the execution flow in ...

evillimiter-windows

Evil Limiter for Windows Windows 版邪恶限速器 这是一个无需物理或管理权限即可限制网络中设备带宽（上传/下载）的工具。 evillimiter 利用 ARP 欺骗和流量整形来限制网络中主机的带宽。原理详见下文。 本工具是原始 Linux 命令行工具 Evil Limiter 的 Windows GUI 移植版。 系统要求 Windows 7 或更高版本 运行安装程序时，缺失的依赖（包括第三方应用程序，如 Npcap）将会自动安装。 安装 1. 从 发布页面 下载安装文件 2. 运行安装文件 3. 按照提示操作 4. 如果尚未安装，你会被引导安装...

zer0dump

Zer0Dump Zer0dump 是一个概念验证漏洞利用/工具，用于滥用与 CVE-2020-1472（Zerologon）相关的漏洞，以对未打补丁的 Windows 域控制器发起完全系统接管。 特别感谢 @dirkjanm 和 @SecureAuthCorp...

PrintNotifyPotato

PrintNotifyPotato PrintNotifyPotato Another potato, using PrintNotify COM service for lifting rights For Windows 10 - 11 Windows Server 2012 - 2022 Usege root@kitploit: C:\Windows\Temp PrintNotifyPotato.exe aaaa aaa aaa aaaa aaa aaa aaaa aaa aaa aaaa aaa aaa aaaa aaa aaa aaaa aaa aaa aaaa aaa...

ManualRsrcDataFetching

ManualRsrcDataFetching: one function to replace FindResource & LoadResource & LockResource & SizeofResource windows apis. Note: Payload.ico is a x64 calc shellcode...

CVE-2024-4577-RCE-PoC

CVE-2024-4577 RCE Exploit While implementing PHP, the team did not notice the Best-Fit feature of encoding conversion within the Windows operating system. This oversight allows unauthenticated attackers to bypass the previous protection of CVE-2012-1823 by specific character sequences. Arbitrary...