330 matches found
ALPC-Enumerator
Enumerador de Puertos ALPC Consciente de PPL Una herramienta userland de Windows para enumerar y clasificar puertos de Advanced Local Procedure Call ALPC, incluyendo aquellos propiedad de procesos PPL Protected Process Light donde la duplicación estándar de handles falla. Las herramientas de...
Lsass-Shtinkering
Lsass Shtinkering Nuevo método de volcado de LSASS abusando del servicio Windows Error Reporting. Envía un mensaje al servicio mediante el protocolo ALPC para informar de una excepción en LSASS. Este informe hará que el servicio vuelque la memoria de LSASS. Requisitos previos El valor del registr...
CVE-2024-6769
Entrada de blog: CVE-2024-6769 Envenenando la caché de activación para elevar de integridad media a alta Este blog trata sobre dos bugs encadenados: la primera etapa es un bug de secuestro de DLL causado por el remapeo de la unidad ROOT y la segunda es un bug de envenenamiento de la caché de...
CVE-2017-11783
CVE-2017-11783 1day Exploit by sheisback It isn't complete exploitexec cmd with system privilege, only create file in system32. So you will complete this, need consent.exe uac technique. Reference A view into ALPC-RPC by Clément Rouault & Thomas Imbert, 2017 PacSec...
CVE-2023-21674
Primer 0-day in-the-wild de 2023 🔥 CVE-2023-21674 es una vulnerabilidad en el Procedimiento de Llamada Local Avanzada ALPC de Windows que podría provocar una fuga de la zona de pruebas del navegador y permitir a los atacantes obtener privilegios de SYSTEM, descubierta por Avast kd !analyze -v...
RpcInvestigator
RPC Investigator Please read our blog post announcement. RPC Investigator RPCI is a .NET/C Windows Forms UI application that provides an advanced discovery and analysis interface to Windows RPC endpoints. The tool provides a visual interface around the existing core RPC capabilities of the...
experiments
Experimentos Repositorio de varios experimentos / PoC. debugging-secure-kernel: PoC de depuración con gdb del kernel seguro de Windows 10, sobre QEMU KVM dns: Experimentos relacionados con DNS / Transparencia de certificados / Homoglifos Reducción de superficie de ataque: Desmitificando los...
CVE-2026-20817
CVE-2026-20817 - Escalada de Privilegios ALPC en el Informe de Errores de Windows WER Descripción Este repositorio contiene una Prueba de Concepto PoC para CVE-2026-20817 , una vulnerabilidad de escalada de privilegios local en el servicio de Informe de Errores de Windows WER. La vulnerabilidad...
CVE-2026-20805-POC
CVE-2026-20805 PoC Prueba de concepto para la vulnerabilidad de divulgación de información en Desktop Windows Manager dwm.exe de Microsoft. 📋 Resumen de la Vulnerabilidad ID: CVE-2026-20805 Producto: Microsoft Windows Componente: Desktop Windows Manager dwm.exe CWE-ID: CWE-200 Exposure of Sensiti...
CVE-2026-20805-PoC
PoC CVE-2026-20805 Prueba de concepto que demuestra una vulnerabilidad de divulgación de información en el Administrador de ventanas de escritorio de Microsoft dwm.exe. Descripción general Este repositorio contiene una prueba de concepto PoC personalizada desarrollada para reproducir...
CVE-2022-22814_PoC
Escalada de Privilegios - AsusSystemDiagnosis.exe - Proc39 Ruta completa: C:\WINDOWS\System32\DriverStore\FileRepository\asussci2.infamd64d385bdc0d33d66f9\ASUSSystemDiagnosis\AsusSystemDiagnosis.exe Problema: El puerto ALPC \RPC Control\ASHWTestServer, expuesto por AsusSystemDiagnosis.exe, es...
Four Spy Groups Used the Same Chrome and Windows Exploit Kit Within a Week
Multiple espionage-motivated threat activity clusters have been found deploying a previously undocumented exploit kit called BlueMoon that chains together multiple vulnerabilities in Microsoft Windows and Google Chrome. The first in-the-wild use of BlueMoon has been attributed to the China-aligne...
September Microsoft Patch Tuesday
September Microsoft Patch Tuesday. A total of 973 vulnerabilities were addressed - more than twice as many as in August. Seven products had 20 or more vulnerabilities fixed: Windows Biometric Service 64, Microsoft SQL Server 54, Windows DHCP Server 36, Microsoft Office Word 35, Windows NTFS 29,...
Microsoft Patches Record 974 Flaws, Including Two Exploited Windows Zero-Days
Microsoft on Tuesday broke Patch Tuesday records by addressing an earth-shattering 974 vulnerabilities spanning its software portfolio, including two flaws that it said have been actively exploited in the wild. These include 723 flaws in Windows, 111 in Office and Office 2016, 62 in SQL, and 22 i...
The vulnerability of the Advanced Local Procedure Call (ALPC) handler in Windows operating systems allows attackers to enhance their privileges.
The vulnerability of the Advanced Local Procedure Call ALPC in Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...
Patch Tuesday - September 2026
Microsoft is publishing 974 own-product vulnerabilities on September 2026 Patch Tuesday, including 723 vulnerabilities in Windows. Along with Microsoft fixes for 25 non-Microsoft CVEs, that brings the total number of vulnerabilities on the table today to 999. Whether this is the biggest Patch...
CVE-2026-85880
Heap-based buffer overflow in Windows ALPC allows an authorized attacker to elevate privileges locally...
CVE-2026-69874
Untrusted pointer dereference in Windows ALPC allows an authorized attacker to elevate privileges locally...
