CrackKeyIso

CVE 2023 28229 Windows CNG KeyIso RPC EoP/SBX Discovered by: @k0shl - @Y3A Educational purposes only!...

CVE-2022-21882

CVE-2022-21882 Win32k 권한 상승 영감을 받은 기법: https://github.com/L4ys/CVE-2022-21882 https://github.com/exploitblizzard/Windows-Privilege-Escalation-CVE-2021-1732...

CVE-2023-23397-POC

CVE-2023-23397-POC Exploit POC for CVE-2023-23397 Appointment.cs : the modified file from https://github.com/Sicos1977/MsgKit/blob/master/MsgKit/Appointment.cs Exploit.cs : the code i used to replicate creating the malicious appointment . i modified the code picture in MDSEC article here :...

PrintNightmare-LPE

CVE-2021-1675（PrintNightmare） 针对 CVE-2021-1675（Windows 打印后台处理程序特权提升漏洞）的系统 shell PoC 致谢：彭志宁（@edwardzpeng）和李雪峰（@lxf02942370） 参考：https://github.com/afwu/PrintNightmare Windows 10 Windows Server 2012 感谢所有发现此漏洞的研究人员。 @404death...

Kernel-Arbitrary-Read-Vulnerability-Superfetch-EOP

Kernel-Arbitrary-Read-Vulnerability-Superfetch-EOP https://starlabs.sg/blog/2022/06-trying-to-exploit-a-windows-kernel-arbitrary-read-vulnerability/ 의 reacher를 기반으로 한 커널 임의 읽기 취약점 + Superfetch EOP. Exploit은 낮은 무결성low integrity에서 실행해야 합니다...

CVE-2025-48799

설명 이것은 Windows Update 서비스의 권한 상승 취약점인 CVE-2025-48799에 대한 PoC입니다. 이 취약점은 하드 드라이브가 2개 이상 있는 Windows 클라이언트win11/win10에 영향을 미칩니다. 머신에 여러 하드 드라이브가 있는 경우 Storage Sense를 사용하여 새 콘텐츠가 저장되는 위치를 변경할 수 있습니다. 새 애플리케이션의 위치가 보조 드라이브로 변경되면, 새 애플리케이션 설치 중에 wuauserv 서비스가 심볼릭 링크를 확인하지 않고 임의 폴더 삭제를 수행합니다파일이 발견되면 서비스...

CVE-2022-21970

CVE-2022-21970 Description Microsoft Edge Chromium-based Elevation of Privilege Vulnerability. This vulnerability allows an attacker to execute javascript code on every host without permission, also an attacker can steal local system files, and also he can manipulate the actions against the machi...

CVE-2016-0051

CVE-2016-0051 针对我的CVE-2016-0051（MS-016）的概念验证BSoD（蓝屏死机）和权限提升（至SYSTEM）代码。 在Windows 7 SP1 x86上提权至SYSTEM 在Windows 10 x64上的BSoD 链接 微软安全公告 MS16-016 微软致谢页面 此PoC的一个变体，shell将在同一CMD中生成 by hexx0r 时间线 2015.09.18. 发现漏洞 2015.09.24. 使用此概念验证代码向MSRC（微软安全响应中心）报告 2015.09.25. MSRC归档报告，提供联系信息并将信息发送给分析师 2015.09.30...

CVE-2023-29357-Check

CVE-2023-29357 Microsoft SharePoint Server Elevate Privilege Vulnerability This script will tell you if the target is vulnerable to CVE-2023-29357 Usage root@kitploit: python3 script.py Disclaimer This script is for educational purposes only. Do not use it against targets without prior mutual...

CVE-2023-28229

CVE-2023-28229 Windows CNG KeyIso RPC EoP/SBX Discovered by: @k0shl Reference: https://whereisk0shl.top/post/isolate-me-from-sandbox-explore-elevation-of-privilege-of-cng-key-isolation If compilation fails, rename rpc.h to something else because I didn't realise rpc.h is a standard include in...

CVE-2025-54110-Kernel-EoP-PoC

CVE-2025-54110-Kernel-EoP-PoC PoC implementation for CVE-2025-54110 a Kernel-Level Integer Overflow Vulnerability in the Windows NtQueryDirectoryObject system call. CVE-2025-54110 - Windows Kernel Integer Overflow Analysis CVE: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-54110...

CVE-2023-21768-AFD-for-WinSock-EoP-exploit

CVE-2023-21768-AFD-for-WinSock-EoP-exploit El artículo de análisis está aquí: https://mp.weixin.qq.com/s/9W9puJltbK-xto2A1duqgQ https://www.zoemurmure.top/posts/cve202321768/ Escrito basado en Patch Tuesday - Exploit Wednesday: Pwning Windows Ancillary Function Driver for WinSock afd.sys in 24...

CVE-2020-0753-and-CVE-2020-0754

CVE-2020-0753、CVE-2020-0754および修正された6つのWindows DOS脆弱性に関するWriteupとPOC ファイルシステムの競合状態バグの悪用 - CVE-2020-0753およびCVE-2020-0754の解析 Windows Error Reportingサービスは、先月のPatch...

CVE-2017-0213

CVE-2017-0213: Windows COM Elevation of Privilege Vulnerability Description Author: Google Security Research CVE: 2017-0213 EDB-ID: 42020 References: Project-Zero Microsoft Exploit-Database Video: Youtube Affected Products Product| Version| Update| Build| Tested ---|---|---|---|--- Windows 10|...

CVE-2025-0087-

CVE-2025-0087- CVE-2025-0087 EoP full PoC...

Dell-Driver-EoP-CVE-2021-21551

Dell Driver EoP CVE-2021-21551 Made quick exploit for Dell driver bug CVE-2021-21551 for fun. Great find by @kasifdekel! Writeup can be found here. This exploit has been tested on Windows versions 1809 and 20H2, token offsets may vary on other versions...

CVE-2025-21293

CVE-2025-21293 CVE-2025-21293 est une vulnérabilité d'élévation de privilèges dans Active Directory Domain Services. Elle permet aux "Opérateurs de configuration réseau" d'exécuter du code avec les privilèges SYSTEM via les compteurs de performance Windows. Les versions Windows concernées incluen...

CVE-2023-21768-dotnet

CVE-2023-21768 - Dotnet Porte Dotnet / c do exploit AFD-for-WinSock-EoP Referências: https://github.com/zoemurmure/CVE-2023-21768-AFD-for-WinSock-EoP-exploit https://github.com/chompie1337/WindowsLPEAFDCVE-2023-21768 Por quê? Às vezes você não pode usar binários compilados. Como fazer? Execute o...

CVE-2020-17008

CVE-2020-17008 splWOW64 Elevation of Privilege C:\Windows\splwow64.exe Poc From: https://bugs.chromium.org/p/project-zero/issues/detail?id=2096 0x01 Set splwow64poc.exe Low cd splwow64poc\x64\Release icacls splwow64poc.exe /setintegritylevel L root@kitploit: /setintegritylevel CIOI level explicit...

CVE-2025-24076

CVE-2025-24076 Microsoft Windows Cross Device Service 권한 상승 취약점 악용 개요 이 스크립트는 Windows Cross Device Service 의 취약점을 악용하여 Windows 11 , Windows Server 2025 , Windows Server 2022 23H2 Server Core 설치 시스템에서 권한 상승을 허용합니다. CVE: CVE-2025-24076 CVSS v3.1 점수: 7.3 중요 유형: 권한 상승 약점: CWE-284 - 부적절한 접근 제어 공격 경로: ...