CVE-2023-21768-AFD-for-WinSock-EoP-exploit

CVE-2023-21768-AFD-for-WinSock-EoP-exploit El artículo de análisis está aquí: https://mp.weixin.qq.com/s/9W9puJltbK-xto2A1duqgQ https://www.zoemurmure.top/posts/cve202321768/ Escrito basado en Patch Tuesday - Exploit Wednesday: Pwning Windows Ancillary Function Driver for WinSock afd.sys in 24...

CVE-2020-0753-and-CVE-2020-0754

Writeup y PoC para CVE-2020-0753, CVE-2020-0754 y seis vulnerabilidades DOS de Windows corregidas Explotación del bug de condición de carrera en FileSystem - análisis de CVE-2020-0753 y CVE-2020-0754 El servicio de Informe de Errores de Windows WER ha corregido 2 errores de Elevación de Privilegi...

SOC227-Microsoft-SharePoint-Server-Elevation-of-Privilege-Possible-CVE-2023-29357-Exploitation

SOC227 - Microsoft SharePoint Server Elevation of Privilege CVE-2023-29357 Exploitation CVE-2023-29357 is a critical privilege escalation vulnerability that, when combined with other vulnerabilities, could potentially lead to remote code execution. The CVSS score for this vulnerability is 9.8...

CVE-2017-0213

CVE-2017-0213: Vulnerabilidad de Elevación de Privilegios en COM de Windows Descripción Autor: Google Security Research CVE: 2017-0213 EDB-ID: 42020 Referencias: Project-Zero Microsoft Exploit-Database Vídeo: Youtube Productos Afectados Producto| Versión| Actualización| Compilación| Probado...

CVE-2023-23397-Report

CVE-2023-23397-Report An exploitation demo of Outlook Elevation of Privilege Vulnerability CVE-2023-23397 is a critical EoP vulnerability in Microsoft Outlook that is triggered when an attacker sends a message with an extended MAPI property with a UNC path to an SMB TCP 445 share on a threat...

Microsoft-CVE-2021-1675

Microsoft-CVE-2021-1675 I have created a small C project that exploits vulnerability CVE-2021-1675. For more information about CVE-2021-1675, please check my blog post: https://thalpius.com/2021/07/16/windows-print-spooler-elevation-of-privilege-vulnerability-cve-2021-1675-explained Usage Microso...

CVE-2025-0087-

CVE-2025-0087- CVE-2025-0087 EoP PoC completo...

cve-2018-8453-exp

cve-2018-8453-exp cve-2018-8453 exp This program is an exploit for cve-2018-8453. Development/Test platform: x86: Windows 10 RS2 15063 x64: Windows 10 RS2 16299 Note: Uses Palette to read and write kernel memory. Serious Disclaimer: This tool is only for technical research and learning. Any...

CVE-2023-21768-dotnet

CVE-2023-21768 - Dotnet Dotnet / c port of AFD-for-WinSock-EoP exploit References: https://github.com/zoemurmure/CVE-2023-21768-AFD-for-WinSock-EoP-exploit https://github.com/chompie1337/WindowsLPEAFDCVE-2023-21768 Why? Sometimes you can't use compiled binaries. How to? Run the following in...

Dell-Driver-EoP-CVE-2021-21551

Dell Driver EoP CVE-2021-21551 Fiz um exploit rápido para o bug do driver Dell CVE-2021-21551 por diversão. Ótima descoberta por @kasifdekel! O artigo pode ser encontrado aqui. Este exploit foi testado nas versões 1809 e 20H2 do Windows; os offsets de token podem variar em outras versões...

CVE-2020-17008

CVE-2020-17008 splWOW64 Elevation of Privilege C:\Windows\splwow64.exe Poc From: https://bugs.chromium.org/p/project-zero/issues/detail?id=2096 0x01 Set splwow64poc.exe Low cd splwow64poc\x64\Release icacls splwow64poc.exe /setintegritylevel L root@kitploit: /setintegritylevel CIOI level explicit...

CVE-2025-21420_POC

Comparación de cleanmgr.exe La nueva versión de cleanmgr.exe incluye una llamada a la función SetProcessMitigationPolicy. Con MitigationPolicy establecido en 16, correspondiente a ProcessRedirectionTrustPolicy. Combinado con la descripción de Microsoft de CWE-59: Resolución incorrecta de enlaces...

CVE-2023-23397

A Simple PoC in PowerShell for CVE-2023-23397 CVE-2023-23397 is a vulnerability in MS Outlook that allows an attacker to potentially exfil user authentication details. The vulnerability relates to the the ability for an attacker to specify a UNC path in the "ReminderSoundFile" property within an...

CVE-2024-40431-CVE-2022-25479-EOP-CHAIN

CVE-2024-40431+CVE-2022-25479 cadena para EOPDATA ONLY ATTACK Un sabio dijo una vez "that rent is too damn high" y "give credit where credit is due", un agradecimiento a https://x.com/zwclose por encontrar y publicar un PoC para estos 2 bugs. Nosotrosreubensammut y Vladdespués de preguntarle...

CVE-2016-0051

Proof-of-concept BSoD Blue Screen of Death and Elevation of Privilege to SYSTEM code for my CVE-2016-0051 MS-016. vulnerabilty poc auhor: koczkatamas https://twitter.com/koczkatamas Original code: https://github.com/koczkatamas/CVE-2016-0051 Thanks to koczkatamas this PoC will run from CMD and th...

CVE-2019-1132

CVE-2019-1132 EoP POC for CVE-2019-1132 This exploit is tested on Windows 7 x86 build 7601 With June Patch installed...

CVE-2019-0803

CVE-2019-0803 Win32k Elevation of Privilege Poc Screenshot Reference steal Security token https://github.com/mwrlabs/CVE-2016-7255...

CVE-2018-8410

CVE-2018-8410 PoC for for Windows Kernel Registry Elevation of Privilege Vulnerability...

PrintNightmare-LPE

CVE-2021-1675PrintNightmare poc di shell di sistema per CVE-2021-1675 Windows Print Spooler Elevation of Privilege crediti: Zhiniang Peng @edwardzpeng & Xuefeng Li @lxf02942370 Riferimento: https://github.com/afwu/PrintNightmare windows 10 windows server 2012 Crediti a tutti i ricercatori che han...

CVE-2021-26882

CVE-2021-26882 Remote Access API – Sicherheitslücke zur Rechteausweitung PoC https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-26882 Schritt 1: Doppelklicken Sie auf crash.pbk. Schritt 2: Lösen Sie einen Absturz aus...