miniplasma-advisory

MiniPlasma - Vulnerability Protection Advisory Technical mitigation advisory for the MiniPlasma variant of CVE-2020-17103 affecting the Windows Cloud Files Mini Filter Driver cldflt.sys. Authored by Rafael França - Microsoft Cybersecurity Architect CSA, Customer Success Unit CSU. Download...

RRAS-VULNERABILITY-CVE-2026-25172-CVE-2026-25173-CVE-2026--26111

Windows 11 RRAS Vulnerability Simulation Lab CVE-2026-25172, CVE-2026-25173, CVE-2026-26111 ⚠️ IMPORTANT – Educational & Defensive Use Only This guide is for setting up an isolated, controlled lab environment to understand integer overflow vulnerabilities in the Windows Routing and Remote Access...

ludus_crushftp_cve-2025-31161_sim

Ansible Role: CrushFTP CVE-2025-31161 Simulation Ludus Companion role for luduscrushftpcve-2025-31161 that adds a realistic scenario layer on top of the vulnerable CrushFTP instance. !NOTE This role requires the main luduscrushftpcve-2025-31161 role to be applied first. What It Does Simulated...

CVE-2021-1675

🖨️ CVE-2021-1675 — PrintNightmare Windows Print Spooler RCE/LPE Type: Proof of Concept — Simulated Non-Functional CVE: CVE-2021-1675 + CVE-2021-34527 CVSS: 7.8 LPE / 8.8 RCE Alias: PrintNightmare Patched: Junho/Julho 2021 — KB5004945 Adicionado ao CISA KEV: Julho 2021 ⚠️ O payload deste PoC é...

CVE-2026-4255

CVE-2026-4255 Thermalright TR-VISION HOME DLL Side-Loading Privilege Escalation Severity: HIGH CVSS 8.4 CWE: CWE-829 Inclusion of Functionality from Untrusted Control Sphere Published: 16/03/2026 CNA: Toreon Affected versions: Thermalright TR-VISION HOME ≤ 2.0.5 Windows 64-bit Discovered by: Ard3...

CVE-2025-62215

CVE-2025-62215 INTEGRATED EXPLOIT SUITE v4.5 1. Resumen del proyecto Este proyecto es un conjunto de herramientas de explotación automatizadas dirigidas a vulnerabilidades de Race Condition y Double-Free en el kernel de Windows. Combina la extracción dinámica de offsets utilizando el motor JS de...

hacking-team-windows-kernel-lpe

This an exploit for CVE-2015-2426 MS-078, a Windows kernel local privilege escalation 0day from the Hacking Team archive email here. It was developed by Eugene Ching / Qavar security. Original contents below: Summary. Windows kernel memory corruption exploit leading to privilege escalation. Teste...

UAC-bypass

UAC-bypass Please note: It is a Proof of Concept and is not intended for illegal usage! Visit my website: https://winscripting.blog/ Please donate to this Bitcoin address if you find this PoC helpful: 12WN3fHmr5EB2Y5cDbKAgTDYMo5d1b1AUu alt text...

microsoft-cve-2021-1675

!IMPORTANT "This repo is now in 'Blue Screen' mode-archived and frozen in time!" Microsoft-CVE-2021-1675 I have created a small C project that exploits vulnerability CVE-2021-1675. For more information about CVE-2021-1675, please check my blog post:...

dns_client_fuzzing

Fuzzing del cliente DNS de Microsoft Windows Después de que se descubriera la vulnerabilidad crítica CVE-2026-41096, decidí intentarlo...

cve-2025-7771

CVE-2025-7771 — ThrottleStop.sys LPE CVE-2025-7771에 대한 개념 증명PoC입니다. ThrottleStop.sys는 접근 통제 없이 임의의 물리 메모리 읽기/쓰기를 허용하는 두 개의 IOCTL 핸들러를 노출합니다. 즉, 관리자 권한을 가진 모든 프로세스가 물리 RAM 어디든 읽거나 쓸 수 있습니다. Windows 10 22H2 및 Windows 11 23H2 x64에서 테스트했습니다. 수행 내용 드라이버 바이너리를 IDA Pro에 로드하여 내부적으로 어떻게 동작하는지 파악하는 것부터...

CVE-2026-33829

CVE-2026-33829 This repository contains an automated Bash tool designed to passively and controllably audit and verify whether Windows OS assets are vulnerable to insecure manipulation of the search: protocol handler. The script acts as a passive listener, using tcpdump to capture outgoing...

CVE-2026-50656-rogueplanet-validation

RoguePlanet PoC Validation Report for Microsoft Defender Purpose and scope of the report This report concerns the validation of the publicly described RoguePlanet PoC related to Microsoft Defender. The described technique was presented in the media on 10 June 2026 as a Local Privilege Escalation...

PT-2026-86788

ImageMagick before 7.1.2-30 contains a time-of-check-time-of-use vulnerability in path policy enforcement on Windows that allows attackers to bypass read or write restrictions by exploiting symlink race conditions. Attackers can swap symlinks between policy validation and file access to read or...

Apache OFBiz - Remote Code Execution

Apache OFBiz below 18.12.16 is vulnerable to unauthenticated remote code execution on Linux and Windows. An attacker with no valid credentials can exploit missing view authorization checks in the web application to execute arbitrary code on the server id: CVE-2024-45195 info: name: Apache OFBiz -...

AllTools v1.7

AllTools All reasonably stable tools AccessMask - decode access mask for common object types BgInfo - WPF version of the Sysinternals BgInfo tool BITSMgr - BITS jobs manager application CLR Explorer - View .NET process information / dump file CpuStres - thread/CPU stress testing app CpuStress...

CVE-2022-24521

CVE-2022-24521 CVE-2022-24521 PoC win10 21h2 19044.1620 win11 21h2 22000.593 Compilation Basic Information Windows SDK Version: 10.0 latest installed version Platform Toolset: Visual Studio 2022 v143 C++ Language Standard: Default ISO C++14 Standard...

CVE-2024-38063

CVE-2024-38063 Research – Windows IPv6 Kernel Remote Code Execution 1. Project Overview This repository contains our research and analysis of CVE-2024-38063 , a critical vulnerability in the Windows TCP/IP stack. CVE stands for Common Vulnerabilities and Exposures. It is a standardized dictionary...

forti_shield

fortishield A combined POC for CVE-2021-31955, CVE-2015-4077, and CVE-2015-5736 This one of the possible solutions for an extra mile in the 2022 version of the EXP-401 course. This extra mile was removed in the 2025 version of the course. This solution will not work for the current extra mile...

CVE-2019-0232

CGI RCE Exploit PoC for unauthenticated RCE via CGI batch endpoints. Downloads nc.exe to the target using certutil and triggers a reverse shell. Setup 1. Serve nc.exe in the same directory where nc.exe is: root@kitploit: python3 -m http.server 80 2. Start your listener: root@kitploit: nc -lvnp...