265566 matches found
PowerPriv
PowerPriv DESCRIPCIΓN Una implementaciΓ³n en PowerShell de PrivExchange por @dirkjan cΓ³digo original aquΓ: https://github.com/dirkjanm/PrivExchange/blob/master/privexchange.py Γtil para entornos en los que no se pueden ejecutar aplicaciones basadas en Python, se tienen credenciales de usuario o no...
BrokenPipe
BrokenPipe - Steam Client Service LPE Vulnerability This is the single-script version. The original compiled C++ PoC is on the legacy branch. Thanks to John Hammond for the suggestion, subscribe to him! PoC video: YouTube John Hammond's breakdown: YouTube Greetz to @MSNIGHTMARE2000 for the inspo ...
CVE-2021-3156
CVE-2021-3156 Root shell PoC for CVE-2021-3156 no bruteforce For educational purposes etc. Tested on Ubuntu 20.04 against sudo 1.8.31 All research credit: Qualys Research Team Check out the details on their blog. You can check your version of sudo is vulnerable with: $ sudoedit -s Y. If it asks f...
CVE-2026-24291
π Privilege Escalation Bypass Utility v2026 Streamlined Access Elevation for Advanced Windows Workflows π§ Conceptual Overview This tool is engineered for power users who require frictionless elevation of system permissions without repetitive manual authentication. Think of it as a digital skeleto...
BackupOperatorToDA
De Operador de Copias de Seguridad a Administrador de Dominio Si comprometes una cuenta miembro del grupo Operadores de Copias de Seguridad, puedes convertirte en Administrador de Dominio sin necesidad de RDP o WinRM en el Controlador de Dominio. Todo el crΓ©dito para filipdragovic con su POC...
json-interop-vuln-labs
JSON Interoperability Vulnerability Labs Description These are the companion labs to my research article "An Exploration of JSON Interoperability Vulnerabilities". Lab 1: Free purchases in an E-commerce Application Key Collision Attacks: Inconsistent Duplicate Key Precedence Inconsistent Large...
CVE-2026-1937
π΄ Vulnerability Overview CVE-2026-1937 β Missing Authorization β Arbitrary Options Update β Privilege Escalation Field| Details ---|--- CVE ID| CVE-2026-1937 Severity| HIGH β CVSS v3.1 Score: 7.2 Vector| CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H CNA| Wordfence Researcher| Daniel Basta whizzu β...
opensuse-leap-privesc-exploit
CVE-2025-6018 + CVE-2025-6019 Exploit Chain This exploit was developed to solve a HackTheBox challenge targeting openSUSE Leap 15.6. Credits This exploit is based on the original research by the Qualys Security Team: Advisory: https://cdn2.qualys.com/2025/06/17/suse15-pam-udisks-lpe.txt...
CVE-2025-2304-POC
CVE-2025-2304-POC Manual poc for CVE-2025-2304: Camaleon CMS Version 2.9.0 Exploitation Steps 1. Log in as a low-privileged user e.g., "Bob". 2. Intercept the password change using a proxy e.g Burpsuite, caido and more 3. Capture the updatedajax request during a password change. 4. Inject the...
CVE-2025-6018-CVE-2025-6019-Privilege-Escalation-Exploit
CVE-2025-6018 + CVE-2025-6019 Privilege Escalation Guide π Quick Exploitation Steps Step 1: Prepare XFS Image Local Machine Create 300MB XFS image dd if=/dev/zero of=xfs.image bs=1M count=300 mkfs.xfs -f xfs.image Mount and install SUID bash mkdir mnt sudo mount -t xfs xfs.image mnt sudo cp...
CVE-2023-32243-Detection-and-Mitigation-in-WordPress
π CVE-2023-32243 β Detection and Mitigation in WordPress π Project Title: Detection and Mitigation of CVE-2023-32243 in the Essential Addons for Elementor WordPress Plugin π§ Abstract This project explores the exploitation and prevention of CVE-2023-32243 , a critical privilege escalation...
CTT-Vsyslog-Vortex-CVE-2023-6246
CTT-Vsyslog-Vortex-CVE-2023-6246 CVE-2023-6246 glibc vsysloginternal heap buffer overflow exploitation using Convergent Time Theory Ξ± = 0.0302011. 33-layer temporal heap spray + phase-locked trigger for reliable local privilege escalation. README.md CTT-Vsyslog-Vortex Temporal Resonance Exploit f...
CVE-2025-32463
CVE-2025-32463: Sudo Privilege Escalation chroot This repository contains information and/or a proof of concept PoC about the vulnerability CVE-2025-32463 , a critical local privilege escalation flaw in the sudo utility. π Description The vulnerability allows a local user to gain root access by...
CVE-2026-84245
IBM Guardium Data Protection 12.2 is vulnerable to a local privilege escalation in the cpwrapper component. A low-privileged local user could exploit this vulnerability to gain root privileges and access or modify sensitive system files...
CVE-2026-84250
IBM Guardium Data Protection 12.2 is vulnerable due to weak cryptographic protection and a hard-coded recovery key in the pkcrypto passkey component. A local attacker could exploit this vulnerability to recover the root password and gain root privileges...
Change-Lockscreen
Change-Lockscreen Change-Lockscreen is a tool to trigger network authentications as SYSTEM by changing the Windows lock screen image from the command line to perform privilege escalation attacks such as the one described in the post linked below:...
cve-2019-5736-poc
To run: 1. edit poc command in stage2.c 2. build docker docker build -t cve . 3. run docker docker run -d cve /bin/bash -c "tail -f /dev/null" 4. backup docker-runc cp /usr/bin/docker-runc /usr/bin/docker-runc.bak 5. docker exec -it docker-id /bin/bash 6. in docker run cd /root && ./run.sh && exi...
CVE-2024-0012_CVE-2024-9474_PoC
π CVE-2024-0012 & CVE-2024-9474 Palo Alto PAN-OS Exploit π π‘οΈ Description This Proof-of-Concept PoC script targeting vulnerabilities in Palo Alto PAN-OS, specifically CVE-2024-0012 and CVE-2024-9474 by automating the exploitation process, including autentication bypass, payload creation, chunked...
Gogs_RCE
GogsRCE Vulnerability Reproduction 0x01 Register a Regular Account on the Frontend 0x02 Compile a Forged Admin Session Using Go go run main.go package main import "bytes" "encoding/gob" "encoding/hex" "fmt" "io/ioutil" func EncodeGobobj mapinterfaceinterface byte, error for , v := range obj...