CVE-2017-8464-EXP

CVE-2017-8464-EXP Support x86 and x64 Just for test Lnk file from: https://github.com/rapid7/metasploit-framework/pull/8767 Thanks to ykoster Small change,replace the dll file,fix the bug of crashing explorer.exe.ykoster has fixed this bug POC: x86: x64: If you can determine the USB drive,one LNK...

0xKern3lCrush

💀 0xKern3lCrush-M4te-CVE-2026-0828 Заметки по BYOVD-исследованиям Windows и разведке конечных точек Строго образовательный / репозиторий для исследований безопасности. Цель: документировать и понять техники Bring-Your-Own-Vulnerable-Driver BYOVD на основе публичных раскрытий — ноль рабочих...

CVE-2018-8414-POC

CVE-2018-8414 POC Windows Shell Package Setting Remote Code Execution Vulnerability Уязвимость удаленного выполнения кода в настройках пакета оболочки Windows Затронутые версии: Windows 10 Версия 1703 – 1803 / Windows Server Версия 1709 – 1803 Примечание: Иногда эксплойт не срабатывает в...

CVE-2024-4577-EXPLOIT

CVE-2024-4577 - PHP CGI 인수 주입 원격 코드 실행 RCE 특정 PHP 버전8.1. 8.1.29 미만, 8.2. 8.2.20 미만, 8.3. 8.3.8 미만에서 Windows 환경의 Apache와 PHP-CGI를 사용할 때 심각한 취약점이 존재합니다. 시스템이 특정 코드 페이지를 사용하도록 구성된 경우, Windows의 "Best-Fit" 동작이 Win32 API 함수에 전달되는 명령줄의 문자를 대체할 수 있습니다. 이 동작으로 인해 PHP-CGI 모듈이 해당 문자를 PHP 옵션으로 잘못 해석하여, 공격자가...

CVE-2023-41772

CVE-2023-41772 / UIFuckUp Эксплойт UIFuckUp для получения системных привилегий от обычного пользователя в Windows 10 1809 и выше и 11. Как использовать: 1. Скомпилируйте uiaccessexploit.exe и uiaccessexploit.dll 2. Создайте каталог C:\exploit 3. Поместите uiaccessexploit.exe, uiaccessexploit.dll ...

bluekeep

bluekeep Публичная работа для CVE-2019-0708 Обновление от 2019-11-17 Добавлен код POC эксплойта для Windows 7 32bit. Используя адрес из кода эксплойта POC, я достиг 80% успеха на моей тестовой VM. Вероятно, его можно модифицировать для повышения. Использование Замените переменную buf на ваш...

CVE-2026-78043

A flaw was found in OpenVPN. The Windows Interactive Service allows local authenticated users to bypass security restrictions and load unauthorized configuration files. By crafting special paths, an attacker can manipulate the service's configuration, potentially leading to privilege escalation...

CVE-2023-27470_Exercise

CVE-2023-27470 EoP via Arbirary File Deletion Exercise This repository contains a local privilege escalation exercise that replicates CVE-2023-27470. Your mission, should you choose to accept it, find the vulnerability and get a SYSTEM Command Prompt! If you would like the jump to the solution,...

CVE-2018-2628

Тест на наличие уязвимости Загрузка shell Способ 1: Способ 2: Выполнение shell Получение meterpreter root@kitploit: msf use exploit/multi/script/webdelivery msf exploitmulti/script/webdelivery set target 3 target = 3 msf exploitmulti/script/webdelivery set payload windows/meterpreter/reversetcp...

EUVD-2026-72380

ImageMagick before 7.1.2-30 contains a time-of-check-time-of-use vulnerability in path policy enforcement on Windows that allows attackers to bypass read or write restrictions by exploiting symlink race conditions. Attackers can swap symlinks between policy validation and file access to read or...

CVE-2026-86422 ImageMagick before 7.1.2-30 Path Policy TOCTOU Symlink Race

ImageMagick before 7.1.2-30 contains a time-of-check-time-of-use vulnerability in path policy enforcement on Windows that allows attackers to bypass read or write restrictions by exploiting symlink race conditions. Attackers can swap symlinks between policy validation and file access to read or...

CVE-2026-86422 ImageMagick before 7.1.2-30 Path Policy TOCTOU Symlink Race

ImageMagick before 7.1.2-30 contains a time-of-check-time-of-use vulnerability in path policy enforcement on Windows that allows attackers to bypass read or write restrictions by exploiting symlink race conditions. Attackers can swap symlinks between policy validation and file access to read or...

CVE-2026-86422

ImageMagick versions before 7.1.2-30 are affected by a time-of-check-time-of-use (TOCTOU) vulnerability in its path policy enforcement mechanism on Windows . An attacker with local access and low privileges can exploit symlink race conditions by swapping symlinks between policy validation and act...

CVE-2023-29336

CVE-2023-29336 - Win32k 로컬 권한 상승 - PoC 현재는 패치되었지만 활발히 악용되었던 Microsoft Windows의 보안 결함에 대한 세부 정보가 공개되었습니다. 이 결함은 위협 행위자가 영향을 받는 시스템에서 상승된 권한을 획득하는 데 악용될 수 있습니다. CVE-2023-29336으로 추적되는 이 취약점은 심각도 7.8로 평가되며, Win32k 구성 요소의 권한 상승 버그와 관련되어 있습니다. "이 취약점을 성공적으로 악용한 공격자는 SYSTEM 권한을 획득할 수 있습니다."라고 Microsoft는...

CVE-2019-0888

CVE-2019-0888 CVE-2019-0888 PoC - Windows ActiveX Data ObjectsADO의 Use-After-Free 취약점 분석 글: https://news.sophos.com/en-us/2019/07/09/cve-2019-0888-use-after-free-in-windows-activex-data-objects-ado/...

cve-2018-8611

CVE-2018-8611 KTM UAF 권한 상승 익스플로잇 이것은 CVE-2018-8611에 대한 제 PoC 권한 상승 익스플로잇입니다. 저는 ost2 windows kernel exploitation 강좌를 공부하면서 이 익스플로잇을 작성했습니다. 강좌가 단계별 접근 방식을 취한다는 점과 제공되는 예제들이 정말 마음에 들었고, 그래서 이것은 익스플로잇의 제 나름의 버전입니다. 제공된 익스플로잇 코드를 복사하여 붙여넣지 않으려고 노력했고, 이상한 커널 버그를 디버깅하는 데 몇 시간을 허비해야 했지만, 어차피 끝낼 수 있다고...

BYOVD

EnPortv-Killer PoC for vulnerability in EnPortv driver from EnCase As of 2026-07-10, the driver is listed onLOLDDrivers but remains absent from Microsoft's recommended driver block rules as of 2026-07-10 Built on byovd-lib -- implements the DriverConfig trait and delegates the full BYOVD flow to...

cve-2016-0040

cve-2016-0040 PoC для уязвимости CVE-2016-0040, обнаруженной и эксплуатируемой Meysam Firozi @R00tkitSmm Этот PoC помогает записывать произвольные данные по произвольному адресу в ядре Windows Для дополнительной информации смотрите мой блог:...

cve-2020-16898

CVE-2020-16898 PoC BSOD for CVE-2020-16898 badneighbor Tested against Windows 10 version 2004...

cve-2019-12750

Symantec: локальное повышение привилегий - CVE-2019-12750 Основано на отличном обзоре от Kyriakos Economou: https://labs.nettitude.com/blog/cve-2019-12750-symantec-endpoint-protection-local-privilege-escalation-part-1/ На данный момент поддерживаются только x64 и старые версии Windows...