517 matches found
CVE-2022-21907
CVE-2022-21907 Descripción 1. Este repositorio detecta un sistema vulnerable a CVE-2022-21907 CVSS:3.1 9.8 y protege contra esta vulnerabilidad si se desea. Ofrezco 2 códigos de PowerShell en 1 línea. 2. Propongo scripts puros en Python, PowerShell, Ruby y módulos de Metasploit y Nmap para atacar...
CVE-2016-0051
针对我的 CVE-2016-0051 MS-016 的概念验证 BSoD(蓝屏死机)和权限提升(到 SYSTEM)代码。 漏洞 PoC 作者: koczkatamas https://twitter.com/koczkatamas 原始代码: https://github.com/koczkatamas/CVE-2016-0051 感谢 koczkatamas 此 PoC 将从 CMD 运行,并且 shell 会在同一个 CMD 中生成 -pid- 更多信息请参考上面的链接 此仓库包含 Windows 7 PoC 的源代码,同时也有已编译版本,如果你遇到问题可以直接使用 将 EoP.ex...
Absolutely-Positively-NOT-Hacking-Back-with-Pcap
Absolutamente Positivamente NO Contraatacar con Pcap Transmitiendo Secuencias Inesperadas de Bytes de Red con Alta Probabilidad de Pantallazo Azul o De lo Contrario Bloquear Nodos de Comando y Control del Atacante Esto se presentó en TheSAS2019: https://www.youtube.com/watch?v=Z1-4-amGdaM...
CVE-2021-31166
CVE-2021-31166 Por qué Recientemente escribí un exploit para CVE-2021-31166, explota CVE-2021-31166 y CVE-2021-31166. Un pentester debería usar https://github.com/mauricelambert/CVE-2021-31166, pero en los equipos SOC necesitamos conocer la vulnerabilidad específica para corregirla adecuadamente,...
CVE-2020-0796
CVE-2020-0796 整数溢出漏洞 在OriginalCompressedSegmentSize字段中放入比可存储值更大的值。变量无法承受该值,导致被意外识别为非常小的数或负数。此时程序可能发生意外行为,例如蓝屏或权限提升。 简单来说,就是故意向某个变量中放入超过其承受能力的较大值。 演示视频 https://github.com/user-attachments/assets/2b897cfd-6009-4de8-9638-8a9bace6ec7e 参考...
CVE-2024-6768
CVE-2024-6768: La validación incorrecta de la cantidad especificada en la entrada produce un estado irrecuperable en CLFS.sys causando un BSoD. Introducción: CVE-2024-6768 es una vulnerabilidad en el controlador del sistema de archivos de registro común CLFS.sys de Windows, causada por una...
Invoke-BSOD
Invoke-BSOD 当您想让电脑罢工时——无需管理员权限! BSOD 方法来自:https://github.com/Leurak/MEMZ/blob/master/WindowsTrojan/Source/Destructive/KillWindows.cL10-L18 Invoke-BSOD.ps1 一个用于在没有管理员权限的情况下触发蓝屏死机(BSOD)的 PowerShell 脚本。同时枚举 Windows 崩溃转储设置。 这是一个独立的脚本,它不依赖于此处的任何其他文件。 Invoke-BSOD 触发蓝屏死机。 Get-DumpSettings...
CVE-2019-0708-Batch-Blue-Screen
CVE-2019-0708-Batch-Blue-Screen Reescritura del script de pantalla azul del 0708 escrito por un experto, modificado para provocar pantallazos azules en lote por segmento de red. Uso: python3 poc.py 192.168.20 64 Ataca en lote a todos los hosts 1-255 del segmento de red 192.168.20 provocando...
CVE-2019-0708
CVE-2019-0708 蓝屏poc Windows 7 64位 已经测试〜 命令:python crashpoc.py ip 64 https://github.com/n1xbyte/CVE-2019-0708/ Leaving for a wedding tomorrow, if I can't find anything then someone else take the reins Going to drop the crash PoC here Friday if there isnt one public already... Maybe the following...
CVE-2021-31166-Exploit
CVE-2021-31166-Exploit Exploit para la vulnerabilidad RCE de la pila de protocolos HTTP de Microsoft CVE-2021-31166 Una solicitud Http especialmente manipulada dirigida a una versión vulnerable de Windows resultará en un ataque DOS. Y el servidor se reiniciará con un error de pantalla azul...
CVE-2019-0708
CVE-2019-0708 CVE-2019-0708批量蓝屏恶搞 测试环境:win7 、win2008、win2008r2 用法: python bluekeep.py -u ./你的文件.txt -b 64电脑系统位数)...
CVE-2025-29824
CVE-2025-29824 win1021h2190445608x64 win1123h2226315126x64 testclient 测试程序 monitorclfssys 监控clfs 所有IRP请求的驱动程序 poc Crash 蓝屏poc LPE win10poc win11poc 编译基本信息 Windows SDK 版本 :10.0 最新安装的版本 平台工具集: Visual Studio 2022 v143 C++ 语言标准 : 默认ISO C++14 标准...
CVE-2020-0796-POC
CVE-2020-0796 预认证POC c 2020 ZecOps, Inc. - https://www.zecops.com - 发现攻击者的错误 用于检测CVE-2020-0796 / "SMBGhost" 的POC 预期结果:蓝屏 仅用于教育和企业环境中的测试。 ZecOps不对代码负责,使用者自行承担风险。 如果您对用于服务器、终端和移动设备的无代理DFIR工具感兴趣,可自动检测SMBGhost及其他类型攻击,请联系[email protected]。 用法 CVE-2020-0796-POC.exe 如果省略,则POC在本地主机(127.0.0.1)上执行。...
CVE-2026-2636_PoC
CVE-2026-2636: CLFS.sys Unrecoverable State Leading to BSoD Overview CVE-2026-2636 is a vulnerability in the Windows Common Log File System CLFS driver CLFS.sys. An unprivileged user can trigger an unrecoverable system state by calling the ReadFile API on a handle opened via CreateLogFile. This...
CVE-2019-0708
CVE-2019-0708 CVE-2019-0708 BlueKeep漏洞批量扫描工具和POC,暂时只有蓝屏。 0x01 扫描 - windows usage: rdpscan.exe ip1-ip2 .\rdpscan.exe 192.168.1.1-192.168.1.2 192.168.1.1 - VULNERABLE - CVE-2019-0708 192.168.1.2 - SAFE - CredSSP/NLA required rdpscan.exe --file ip.txt .\rdpscan.exe --file ip.txt 192.168.1.1 -...
CVE-2026-49494 Xcitium Client Security / Comodo Internet Security Remote Denial of Service
Xcitium Client Security XCS before 13.8.2.10019 and Comodo Internet Security CIS through 12.3.4.8162 fix expected by 2026 Q3 contain an integer underflow vulnerability in the firewall driver Inspect.sys that allows remote unauthenticated attackers to crash the system by sending a crafted IPv6...
PT-2026-47183
Name of the Vulnerable Software and Affected Versions Comodo Internet Security affected versions not specified Description The firewall driver Inspect.sys contains an integer underflow in its IPv6 packet parser. The parser decrements an unsigned 64-bit payload-length value, derived from the IPv6...
CVE-2026-49494: Integer Underflow (Wrap or Wraparound)
Xcitium Client Security XCS before 13.8.2.10019 and Comodo Internet Security CIS through 12.3.4.8162 fix expected by 2026 Q3 contain an integer underflow vulnerability in the firewall driver Inspect.sys that allows remote unauthenticated attackers to crash the system by sending a crafted IPv6...
CVE-2026-2810
Netskope was notified about a potential gap in the Endpoint DLP Module for Netskope Client on Windows systems. The successful exploitation of the gap can potentially allow an unprivileged user to trigger an out-of-bounds read within a driver, leading to a Blue-Screen-of-Death BSOD. Successful...