parallels-file-move-privesc

parallels-file-move-privesc This repository contains an exploit for CVE-2023-50226 / ZDI-CAN-21227, which can be used to escalate privileges to root using Parallels Desktop on versions before 18.3.2...

Patriot-Linux

Patriot-Linux Host IDS for desktop users Patriot Linux is a HIDS for desktop users who wants real time graphical alerts when something suspicious happens Patriot detect: 1- Suspicious process running 2- New process starting TCP/IP Connection 3- Auditd alerts 4- New keyboards plugged Installation...

Python Security Project

🔐 Desktop Cryptographic File Encryption & Decryption Tool A production-grade Python desktop security utility designed to protect local filesystem assets through authenticated symmetric encryption. This application features a responsive graphical user interface GUI built with Tkinter, an independe...

parallels-plist-escape

parallels-plist-escape This repository contains exploits for CVE-2023-27327 and CVE-2023-27328, which can be used together to escape a Parallels Desktop virtual machine, prior to Parallels Desktop 18.1.1. It also contains code for a required kernel module, in prlmod, which can be used to send...

CVE-2026-0776

CVE-2026-0776 - Discord Client Uncontrolled Search Path Element Summary This repository documents CVE-2026-0776, a local code execution issue affecting the Discord Desktop Client on Windows. The vulnerability is related to unsafe module resolution behavior in Node.js-based components, which may...

HiddenDesktop

Hidden Desktop BOF Hidden Desktop often referred to as HVNC is a tool that allows operators to interact with a remote desktop session without the user knowing. The VNC protocol is not involved, but the result is a similar experience. This Cobalt Strike BOF implementation was created as an...

PlasmaRAT

PlasmaRAT Remote Access TrojanRAT, Miner, DDoS All responsibilities are at your own risk. Please use it only for research purposes. Feature Remote Desktop Keylogger DDoS Miner Startup Control Network Connection View Native Method Controller...

redsnarf

root@kitploit: . \ \ | / / / \ | // \ / |\ \ / \ \ \ \ | | \ // // |/ \ | / | | /| | || /\ / /| /| || / / / / / / [email protected] @redsnarf RedSnarf is a pen-testing / red-teaming tool by Ed Williams for retrieving hashes and credentials from Windows workstations, servers and...

NetScope

NetScope Plataforma offline-first de investigación y respuesta de red para Windows. NetScope es una aplicación de escritorio para analistas de seguridad, respondedores de incidentes y jugadores de CTF. Toma una captura de paquetes .pcap / .pcapng o una interfaz en vivo y la convierte en una...

CVE-2023-27035

CVE-2023-27035 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N Tipo de vulnerabilidad: Control de acceso incorrecto Descripción: Un problema descubierto en Obsidian Canvas 1.1.9 permite a atacantes remotos enviar notificaciones de escritorio, grabar audio del usuario y otros impactos no especificado...

RemoteKeyStrokes

RemoteKeyStrokes A script to automate keystrokes through an active remote desktop session that assists offensive operators in combination with living off the land techniques. All credits goes to nopernik for making it possible so I took it upon myself to improve it. I wanted something that helps...

CVE-2022-25365

CVE-2022-25365 The privilege escalation vulnerability in Docker Desktop for Windows reference: https://www.cyberark.com/resources/threat-research-blog/breaking-docker-named-pipes-systematically-docker-desktop-privilege-escalation-part-1 File list poc.py Coded by followboy1999 createsymlink.exe...

cve-2019-0708

cve-2019-0708 CVE-2019-0708 Exploit Tool Tool exploit Remote Desktop Service with CVE-2019-0708 Video Demo: https://www.youtube.com/watch?v=SCsJ9Uq3POk...

CVE-2019-0708

CVE-2019-0708 CVE-2019-0708 - A Win7 RDP exploit Sidenote: why?...

CVE-2025-57392

CVE-2025-57392 🔒 Informe de Vulnerabilidad de Seguridad Producto: BenimPOS Desktop V3.0 Tipo de Vulnerabilidad: Permisos de Archivo Inseguros Componentes Afectados: BenimPOS.exe, unins000.exe, System.Data.SQLite.dll Clase de Vulnerabilidad: CWE-276: Permisos Predeterminados Incorrectos Prueba de...

CVE-2020-11493

CVE-2020-11492 Prueba de concepto PoC para la vulnerabilidad de escalada de privilegios de Docker Desktop para Windows. Esta vulnerabilidad fue parcheada en la versión 2.3.0.2 de Docker el 11 de mayo de 2020. Este PoC realiza lo siguiente: crea una tubería con nombre named pipe que imita la tuber...

CVE-2022-23779

CVE-2022-23779: Internal Hostname Disclosure Vulnerability Information Description: Zoho ManageEngine Desktop Central before 10.1.2137.8 exposes the installed server name to anyone. The internal hostname can be discovered by reading HTTP redirect responses. Versions Affected: 10.1.2137.7...

Remote-Desktop-Services-Remote-Code-Execution-Vulnerability-CVE-2019-0708-

Remote-Desktop-Services-Remote-Code-Execution-Vulnerability-CVE-2019-0708- rce exploit , made to work with pocsuite3 https://github.com/knownsec/pocsuite3 install the pocsuite 3 from above link. If you have any issues ,please contact knownsec-404 team Do not open any issues here as this is not mi...

BetterRAT

Information BetterRAT is InfinityRATDiamondRAT Based Next Generation RAT All responsibilities are at your own risk. Please use it only for research purposes. Feature Remote Desktop Remote Connection Controller Remote Keylogger Remote File Manager Remote TaskManager Remote Script...

CVE-2019-0708

CVE-2019-0708 CVE-2019-0708 python3 check 0708 A remote code execution vulnerability exists in Remote Desktop Services – formerly known as Terminal Services – when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests. This vulnerability is...