SharpPN

C PrintNightmare CVE-2021-1675 You'll need a DLL to use SharpPN. So once you have that, just build and specify the dll path in the command-line arguments. Build You can build yourself with C:\Windows\Microsoft.NET\Framework64\v3.5\csc.exe -out:SharpPN.exe C:\Path\to\Program.cs or by opening the...

microsoft-cve-2021-1675

!IMPORTANT "This repo is now in 'Blue Screen' mode-archived and frozen in time!" Microsoft-CVE-2021-1675 I have created a small C project that exploits vulnerability CVE-2021-1675. For more information about CVE-2021-1675, please check my blog post:...

Microsoft-CVE-2021-1675

Microsoft-CVE-2021-1675 I have created a small C project that exploits vulnerability CVE-2021-1675. For more information about CVE-2021-1675, please check my blog post: https://thalpius.com/2021/07/16/windows-print-spooler-elevation-of-privilege-vulnerability-cve-2021-1675-explained Usage Microso...

CVE-2017-0038-EXP-C-JS

CVE-2017-0038-EXP-C-JS Detailed vulnerability analysis and exploit writing process have been published on Security Guest: http://bobao.360.cn/learning/detail/3644.html In the C Exploit, there is one missing printf to print the final color array. You can add it manually or directly use debug...

CVE-2023-29357

Recreation of the SharePoint PoC for CVE-2023-29357 in C with lots of help from ChatGPT. Build with .Net Version 4.7.2 in Visual Studio 2017 Use NuGet Package manager to install any missing packages Yara rules for detection below Usage: root@kitploit: CVE-2023-29357.exe https://yoursharepoint.lol...

CVE-2023-29357-ExE

CVE-2023-29357-ExE Recreación del PoC de SharePoint para CVE-2023-29357 en C de LuemmelSec Usage: root@kitploit: CVE-2023-29357.exe https://yoursharepoint.lol -v...

DCOMUploadExec

DCOM Upload & Execute DCOM Lateral movement POC abusing the IMsiServer interface https://www.deepinstinct.com/blog/forget-psexec-dcom-upload-execute-backdoor The solution contains 2 projects DCOMUploadExec - A C++ project which hosts the lateral movement attack code AssemblyPayload - A .NET DLL...

SharpPolarBear

SharpPolarBear This is a weaponized version for one of the Exploits published by SandboxEscaper from here https://github.com/SandboxEscaper/polarbearrepo. Most of the code comes from rasta-mouse CollectorService repository https://github.com/rasta-mouse/CollectorService. I just changed the...

cve-2025-6907

CVE‑2025‑6907 SQLi Exploit Tool File: exploit.c Author: Byte Reaper Target Service: CODEPROJECT Type: SQL Injection 🔎 Overview This is a standalone C-based SQL Injection exploit targeting the CVE‑2025‑6907 vulnerability in the CODEPROJECT service. It combines multiple advanced techniques: Automat...

WinboxExploit

WinboxExploit C implementation of BasuCert/WinboxPoC Winbox Critical Vulnerability CVE-2018-14847 Just reimplemented a solution from https://github.com/BasuCert/WinboxPoC...

Copy-Fail-Exploit-CVE-2026-31431

Copy-Fail-Exploit-CVE-2026-31431 unning the Python Exploit 1. Execute directly root@kitploit: python3 copyfailexp.py Compiling the C Version 1. Compile root@kitploit: gcc copyfailexp.c -o copyfail 2. Make executable root@kitploit: chmod +x copyfail 3. Run exploit root@kitploit: ./copyfail...

copy-fail-CVE-2026-31431-C

copy-fail-CVE-2026-31431-C Verified on ubuntu 18.04,ubuntu 20.04,ubuntu 22.04,kali 2024,kali 2025,kali 2026 root@kitploit: gcc -o exploit exploit.c -lz && chmod +x exploit && ./exploit Verified on ubuntu 25.04 arm64 root@kitploit: gcc -o exploit exploitaarch64.c -lz && chmod +x exploit && ./explo...

CVE-2021-4034

CVE-2021-4034 root@kitploit: sudo apt install golang-go sudo apt install gccgo-go root@kitploit: grep PRETTY /etc/os-release id gcc cve-2021-4034-poc.c -o cve-2021-4034-poc ./cve-2021-4034-poc...

CVE-2026-31431_exp.c

cve-2016-31431exp.c Since the official version of this CVE did not provide C code, we have added a privilege escalation version of the C code for this vulnerability...

Exploit for Incorrect Resource Transfer Between Spheres in Linux Linux_Kernel

CVE-2026-31431-CopyFail Artifacts and scripts for the CopyFai...

EUVD-2025-20407

Malicious code in bioql PyPI...

CVE-2025-24004

A physical attacker with access to the device display via USB-C can send a message to the device which triggers an unsecure copy to a buffer resulting in loss of integrity and a temporary denial-of-service for the stations until they got restarted by the watchdog...

CVE-2025-24004

A physical attacker with access to the device display via USB-C can send a message to the device which triggers an unsecure copy to a buffer resulting in loss of integrity and a temporary denial-of-service for the stations until they got restarted by the watchdog...

CVE-2023-48090

Removed by vendor...

Microsoft Windows 7 < 10 / 2008 < 2012 (x86/x64) - Local Privilege Escalation (MS16-032)

Exploit Title: Microsoft Windows 7-10 & Server 2008-2012 - Local Privilege Escalation x32/x64 MS16-032 C Date: 2016-04-25 Author: @fdiskyou e-mail: rui at deniable.org Original exploit: https://www.exploit-db.com/exploits/39719/ All credits go to @FuzzySec C version with @FuzzySec powershell code...