Lucene search
+L

289 matches found

Kitploit
Kitploit
added 2026/09/13 6:11 a.m.5 views

ALPC-Enumerator

PPL-Aware ALPC Port Enumerator A Windows userland tool for enumerating and classifying Advanced Local Procedure Call ALPC ports, including those owned by PPL Protected Process Light processes where standard handle duplication fails. Standard enumeration tools often skip protected or access-denied...

5.9AI score
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/13 4:24 a.m.9 views

CVE-2024-6769

Blogpost: CVE-2024-6769 Poisoning the activation cache to elevate from medium to high integrity This blog is about two chained bugs: Stage one is a DLL Hijacking bug caused by the remapping of ROOT drive and stage two is an Activation Cache Poisoning bug managed by the CSRSS server. The first sta...

8.4CVSS6.9AI score0.0108EPSS
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/12 11:12 p.m.6 views

sandbox-attacksurface-analysis-tools

sandbox-attacksurface-analysis-tools version 2. c Google LLC. 2015 - 2024 Developed by James Forshaw This is a small suite of PowerShell tools to test various properties of sandboxes on Windows. Many of the tools take a -ProcessId flag which is used to specify the PID of a sandboxed process. The...

8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/12 8:41 p.m.5 views

CVE-2023-21674

First in-the-wild 0-day of 2023 🔥 CVE-2023-21674 is a vulnerability in Windows Advanced Local Procedure Call ALPC that could lead to a browser sandbox escape and allow attackers to gain SYSTEM privileges discovered by Avast root@kitploit: kd !analyze -v Bugcheck Analysis PAGEFAULTINNONPAGEDAREA 5...

8.8CVSS7.7AI score0.41806EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/12 3:24 p.m.8 views

RpcInvestigator

RPC Investigator Lea nuestro anuncio del blog. RPC Investigator RPCI es una aplicación de interfaz de usuario de Windows Forms en .NET/C que ofrece una interfaz avanzada de descubrimiento y análisis para puntos finales RPC de Windows. La herramienta proporciona una interfaz visual alrededor de la...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/12 11:32 a.m.5 views

CVE-2017-11783

CVE-2017-11783 1day Exploit by sheisback It isn't complete exploitexec cmd with system privilege, only create file in system32. So you will complete this, need consent.exe uac technique. Reference A view into ALPC-RPC by Clément Rouault & Thomas Imbert, 2017 PacSec...

7CVSS7.7AI score0.02501EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/09/12 5:49 a.m.8 views

Lsass-Shtinkering

Lsass Shtinkering New method of dumping LSASS by abusing the Windows Error Reporting service. It sends a message to the service with the ALPC protocol to report an exception on LSASS. This report will cause the service to dump the memory of LSASS. Prerequisites The registry value "DumpType" under...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/11 7:23 a.m.7 views

experiments

Experiments Repository of various experiments / PoC. debugging-secure-kernel: PoC gdb debugging the Windows 10 secure kernel, on top of QEMU KVM dns: Experiments regarding DNS / Certificate transparency / Homoglyphs Attack Surface Reduction: Demystifying Windows Attack Surface Reduction internals...

5.9AI score
SaveExploits0References8
Kitploit
Kitploit
added 2026/09/09 10:11 p.m.21 views

CVE-2026-20817

CVE-2026-20817 - Windows Error Reporting WER ALPC Privilege Escalation Description This repository contains a Proof-of-Concept PoC for CVE-2026-20817 , a local privilege escalation vulnerability in the Windows Error Reporting WER service. The vulnerability allows an authenticated low-privileged...

7.8CVSS7.9AI score0.05502EPSS
SaveExploits0References1
The Hacker News
The Hacker News
added 2026/09/09 4:34 p.m.7 views

Four Spy Groups Used the Same Chrome and Windows Exploit Kit Within a Week

Multiple espionage-motivated threat activity clusters have been found deploying a previously undocumented exploit kit called BlueMoon that chains together multiple vulnerabilities in Microsoft Windows and Google Chrome. The first in-the-wild use of BlueMoon has been attributed to the China-aligne...

8.8CVSS0.0126EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/09/09 11:11 a.m.6 views

CVE-2026-20805-POC

CVE-2026-20805 PoC Proof of concept for the information disclosure vulnerability in Microsoft's Desktop Window Manager dwm.exe. 📋 Vulnerability Summary ID: CVE-2026-20805 Product: Microsoft Windows Component: Desktop Window Manager dwm.exe CWE-ID: CWE-200 Exposure of Sensitive Information to an...

5.5CVSS6.4AI score0.05187EPSS
SaveExploits7
Kitploit
Kitploit
added 2026/09/09 5:08 a.m.9 views

CVE-2026-20805-PoC

CVE-2026-20805 PoC Proof of Concept demonstrating an information disclosure vulnerability in Microsoft Desktop Window Manager dwm.exe. Overview This repository contains a custom Proof of Concept PoC developed to reproduce CVE-2026-20805, an information disclosure vulnerability affecting the Windo...

5.5CVSS6.4AI score0.05187EPSS
SaveExploits7
NVD
NVD
added 2026/09/08 6:21 p.m.6 views

CVE-2026-85880

Heap-based buffer overflow in Windows ALPC allows an authorized attacker to elevate privileges locally...

7.8CVSS0.00572EPSS
SaveExploits0References2
NVD
NVD
added 2026/09/08 6:19 p.m.4 views

CVE-2026-69874

Untrusted pointer dereference in Windows ALPC allows an authorized attacker to elevate privileges locally...

8.2CVSS0.00325EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/08 6:19 p.m.5 views

CVE-2026-69834

Use after free in Windows ALPC allows an authorized attacker to elevate privileges locally...

7CVSS0.00252EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/08 5:16 p.m.4 views

EUVD-2026-73637

Untrusted pointer dereference in Windows ALPC allows an authorized attacker to elevate privileges locally...

8.2CVSS0.00325EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/08 5:16 p.m.14 views

CVE-2026-69874

CVE-2026-69874 is a local privilege escalation vulnerability in Windows ALPC (Advanced Local Procedure Call) caused by an untrusted pointer dereference . An authorized attacker with local high-privilege access can exploit this to elevate privileges further. The vulnerability carries a CVSS 3.1 sc...

8.2CVSS0.00325EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/08 5:16 p.m.4 views

EUVD-2026-73580

Use after free in Windows ALPC allows an authorized attacker to elevate privileges locally...

7CVSS0.00252EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/08 5:16 p.m.11 views

CVE-2026-69834

CVE-2026-69834 is a use-after-free vulnerability in Windows ALPC (Advanced Local Procedure Call) that allows an authorized local attacker to elevate privileges . The attack requires local access , high complexity , and low privileges , with no user interaction needed. The CVSS v3.1 base score is ...

7CVSS0.00252EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/08 5:14 p.m.6 views

EUVD-2026-73365

Heap-based buffer overflow in Windows ALPC allows an authorized attacker to elevate privileges locally...

7.8CVSS0.00572EPSS
SaveExploits0References1
Rows per page
Query Builder