279833 matches found
pyCobaltHound
Quick summary pyCobaltHound is an Aggressor script extension for Cobalt Strike which aims to provide a deep integration between Cobalt Strike and Bloodhound. pyCobaltHound strives to assists red team operators by: Automatically querying the BloodHound database to discover escalation paths opened ...
ThrottleStop
CVE-2025-7771 โ ThrottleStop.sys Privilege Escalation CVE-2025-7771 | CVSS 8.7 | Local Privilege Escalation Overview ThrottleStop.sys exposes unrestricted IOCTL interfaces allowing arbitrary physical memory access through MmMapIoSpace. This enables local privilege escalation by patching kernel...
CVE-2021-4034
CVE-2021-4034 pkexec Local Privilege Escalation exploit...
mach_race
Mach Race OS X Local Privilege Escalation Exploit c fG! 2015, 2016, [email protected] - https://reverse.put.as A SUID, SIP, and binary entitlements universal OS X exploit CVE-2016-1757. Usage against a SUID binary: ./machraceserver /bin/ps compatmode for i in seq 0 1000000; do...
CVE-2024-0044
CVE 2024 0044 CVE-2024-0044, identified in the createSessionInternal function of the PackageInstallerService.java file, is a high-severity vulnerability affecting Android versions 12 and 13. This vulnerability allows an attacker to perform a "run-as any app" attack, leading to local escalation of...
CVE-2026-31431-poc
Copy Fail Command PoC Wrapper A small modified proof-of-concept wrapper for Copy Fail / CVE-2026-31431 that allows passing a custom command from the terminal instead of always launching an interactive root shell so it can be ran in an none interactive environment such as a web shell. This project...
custom-oscp-tooling
Custom OSCP Tooling A consolidated set of read-only, OSCP-exam-safe custom tools by Samson Laird. Everything here enumerates, identifies, and advises. Nothing here exploits, sprays, or modifies a target. The problem this solves OSCP exam and lab work is a list of disconnected one-liners: nmap her...
DoubleStar
. . \ \ \ | | | / // | | | \ / \ | | | \ | | / \ \ \ \ \ \ \ \ | \ | | /| \ | |\ / / \ | | / | | / / / / |/ | /|/ \ / / || /|| / / / / / Windows 8.1 IE/Firefox RCE - Sandbox Escape - SYSTEM EoP Exploit Chain | Remote PAC | || ^ | HTTPS RPC/ALPC RPC/ALPC | firefox.exe | ---------- |...
CVE-2026-43499-root-KernelSU
CVE-2026-43499-root-KernelSU A local privilege escalation adaptation based on kernel vulnerability CVE-2026-43499, with embedded KernelSU integrated. It compiles to produce preload.so; upon successful exploitation, KernelSU will be started in late-load mode jailbreak mode. Supports generating...
CVE-2024-44258
CVE-2024-44258: Symlink Vulnerability in ManagedConfiguration Framework Summary CVE-2024-44258 highlights a symlink vulnerability within the ManagedConfiguration framework and the profiled daemon in Apple devices. When restoring a crafted backup, the migration process fails to validate whether th...
zerologon
ZeroLogon exploitation script Exploit code based on https://www.secura.com/blog/zero-logon and https://github.com/SecuraBV/CVE-2020-1472. Original research and scanner by Secura, modifications by RiskSense Inc. To exploit, clear out any previous Impacket installs you have and install Impacket fro...
pack2theroot-lab
Pack2TheRoot Lab โ CVE-2026-41651 A Dockerised, CTF-style local-privilege-escalation lab built around the Pack2TheRoot advisory CVE-2026-41651, a 12-year-old flaw in the PackageKit daemon disclosed by Deutsche Telekom's Red Team on 22 April 2026. The lab includes three containers : a...
CVE-2021-3560-Polkit-Privilege-Esclation
CVE-2021-3560-Polkit-Privilege-Esclation PoC Original research by Kevin Backhouse This is just a Bash PoC script, that automates the exploitation steps mentioned in Kevin Backhouse's blog. Read his post on this vulnerability:...
SUDO_KILLER
โญ Star us on GitHub โ to show your support! ๐ก Best Viewed in Dark Mode : The project SUDOKILLER made it to the final for the SANS Difference Award 2023 in the category open-source tool. Contributing Stargazers over time Support Credits Disclaimer License Introduction SUDOKILLER is a tool geared...
CVE-2023-36874_BOF
CVE-2023-36874 Windows Error Reporting LPE BOF Introduction This is a mature and operational CobaltStrike BOF implementation of Filip Dragovic's @filipdragovic CVE-2023-36874 Windows Error Reporting LPE exploit. He did the heavy lifting in terms of creating a working exploit by reversing the...
CVE-2025-2563
CVE-2025-2563 The User Registration & Membership WordPress plugin before 4.1.2 does not prevent users to set their account role when the Membership Addon is enabled, leading to a privilege escalation issue and allowing unauthenticated users to gain admin privileges ๐ด Vulnerability Overview...
CVE-2023-4911
CVE-2023-4911 - Looney Tunables This is a atm very rough proof of concept for CVE-2023-4911. So far I've only verified it works on Ubuntu 22.10 kinetic. Current version of the exploit contains a fair amount of "magic" offsets. If you have suggestions on how to improve the heap shaping, feel free ...
CVE-2024-48990
CVE-2024-48990 Exploit for CVE-2024-48990 Local Privilege Escalation in needrestart 3.8 Background Read https://blog.qualys.com/vulnerabilities-threat-research/2024/11/19/qualys-tru-uncovers-five-local-privilege-escalation-vulnerabilities-in-needrestart. Qualys does a great job explaining it. TLD...
CVE-2025-62215_analysis
CVE-2025-62215 Vulnerability Analysis Windows Kernel Race Condition / Double-Free Privilege Escalation ใฎ่ๅผฑๆง่ชฟๆปใใญใธใงใฏใใ Overview Item| Detail ---|--- CVE| CVE-2025-62215 Component| Windows Kernel ntoskrnl.exe Type| Race Condition CWE-362 / Double Free CWE-415 Impact| Local Privilege Escalation โ...