223364 matches found
CVE-2019-1132
CVE-2019-1132 EoP POC for CVE-2019-1132 This exploit is tested on Windows 7 x86 build 7601 With June Patch installed...
CVE-2025-33073
CVE-2025-33073 — Windows SMB Client NTLM Reflection EoP Research writeup by Sentinel AI Defense. Defensive analysis only — no working exploit or PoC is published here. An improper access control flaw in the Windows SMB Client that revives NTLM reflection techniques thought to be mitigated — letti...
From-Foothold-to-Domain-Admin-Weaponizing-CVE-2025-54918-in-Real-World-DevOps
From-Foothold-to-Domain-Admin-Weaponizing-CVE-2025-54918-in-Real-World-DevOps Simulated exploitation and mitigation of CVE-2025-54918 Windows NTLM flaw. Includes detection scripts, Ansible patching, and CI/CD hardening. Demonstrates privilege escalation from low-level access to SYSTEM in hybrid...
my-CVE-2021-1675
= Print Nightmare Analysis Report :imagesdir: Figures :toc: :icons: font :figure-caption: Figure :xrefstyle: short :pdf-theme: basic-theme.yml On June 29, 2021, a very severe Windows Print Spooler vulnerability was exposed as a 0-day, with a base score of 8.8, and was published on GitHub now...
CVE-2020-17008
CVE-2020-17008 splWOW64 Elevación de Privilegios C:\Windows\splwow64.exe Poc From: https://bugs.chromium.org/p/project-zero/issues/detail?id=2096 0x01 establecer splwow64poc.exe Low cd splwow64poc\x64\Release icacls splwow64poc.exe /setintegritylevel L root@kitploit: /setintegritylevel CIOI nivel...
drltrace
Drltrace Compilación de prueba de Windows Compilación de prueba de Linux Drltrace es un trazador dinámico de llamadas API para aplicaciones Windows y Linux. Drltrace está construido sobre el framework de instrumentación binaria dinámica DynamoRIO. Drltrace fue implementado inicialmente por Derek...
drltrace
Drltrace Windows test build Linux test build Drltrace is a dynamic API calls tracer for Windows and Linux applications. Drltrace is built on top of DynamoRIO dynamic binary instrumentation framework. Drltrace was initialy implemented by Derek Bruening and distributed with DynamoRIO and DrMemory...
CVE-2019-0232
CVE-2019-0232 — Apache Tomcat CGI Servlet RCE Educational PoC for authorized CTF / penetration testing only. Running this against systems you do not own or have explicit written permission to test is illegal. Vulnerability Overview CVE-2019-0232 is a Remote Code Execution vulnerability in Apache...
CVE-2015-1578
CVE-2015-1578 Achat 0.150 beta7 - Remote Buffer Overflow Rewrite for python3 for the PNPT course. Original: Author KAhara MAnhara Rewritten: in python3 by Giuseppe Aloisi Achat 0.150 beta7 - Buffer Overflow Tested on Windows 7 32bit https://www.exploit-db.com/exploits/36025 give the script a few...
CVE-2025-50165-x64-Exploit
CVE-2025-50165 Windows Graphics Component RCE x64 Critical Remote Code Execution via malicious JPEG – Windows 11 24H2 unpatched CVSS 9.8 – No privileges, no interaction required root@kitploit: CVE-2025-50165 - windowscodecs.dll untrusted pointer dereference Discovered by Zscaler ThreatLabz Patche...
DllNotificationInjection
DllNotificationInjection Main Contributors Description DllNotificationInection is a POC of a new “threadless” process injection technique that works by utilizing the concept of DLL Notification Callbacks in local and remote processes. An accompanying blog post with more details is available here:...
lenovo-dispatcher-poc
Lenovo Dispatcher PoC This is a basic proof of concept to exploit lenovo dispatcher driver LnvMSRIO.sys CVE-2025-8061. Vulnerabilities found by Luis Casvella source: https://blog.quarkslab.com/exploiting-lenovo-driver-cve-2025-8061.html. The main idea of this poc is to exploit the read/write...
EDRaser
EDRaser Usage Guide EDRaser is a powerful tool for remotely deleting access logs, Windows event logs, databases, and other files on remote machines. It offers two modes of operation: automated and manual. Automated Mode In automated mode, EDRaser scans the C class of a given address space of IPs...
MassExploit-CVE-2024-4577
CVE-2024-4577 Escáner Masivo y Herramienta de Explotación Este script de Python automatiza la detección de servidores vulnerables a CVE-2024-4577 , una vulnerabilidad crítica en PHP-CGI que permite ejecución remota de código RCE a través de parámetros de consulta especialmente manipulados. La...
CVE-2026-20841
CVE-2026-20841 PoC PoC of the "Windows Notepad RCE" vulnerability. Disclaimers 1. I am NOT the one who discovered this vulnerability. Props to the original authors listed on the official disclosure page. I just recreated the PoC according to the description. 2. I personally don't think this...
SOC336-Windows-OLE-Zero-Click-RCE-Exploitation-Detected-CVE-2025-21298
SOC336 - Detección de Explotación RCE Zero-Click OLE de Windows CVE-2025-21298 Walkthrough 🔎 Tabla de Contenido 1. Situación...
dynmx
Prototipo de dynmx dynmx pronunciado dynamics es un enfoque de detección basado en firmas para características de comportamiento de malware basado en secuencias de llamadas a la API de Windows. De manera simplificada, puede pensar en dynmx como una especie de YARA para trazas de llamadas a la API...
CVE-2025-30400
Concepto CVE-2025-30400: Use-After-Free UAF en Windows DWM Resumen del proyecto Este repositorio presenta el Concepto CVE-2025-30400 , un programa en Python diseñado para ilustrar el impacto de una vulnerabilidad de día cero de escalada de privilegios Use-After-Free UAF , como la reportada en...
BlueKeep
Bluekeep PoC Este repositorio contiene investigación sobre CVE-2019-0708. Bluekeep o CVE-2019-0708 es un exploit de RCE que afecta a las siguientes versiones de sistemas Windows: Windows 2003 Windows XP Windows Vista Windows 7 Windows Server 2008 Windows Server 2008 R2 La vulnerabilidad ocurre...