ESCepcion

🛡️ ESCepcion Active Directory Certificate Services Auditor ESCepcion is an open-source tool for auditing and assessing vulnerabilities in Active Directory Certificate Services AD CS infrastructures. It is designed to automate the detection of privilege escalation paths ESC with a strict focus on...

token-priv

Abusing Token Privileges For EoP August 2017 Bryan Alexander @dronesec Stephen Breen @breenmachine This repository contains all code and a Phrack-style paper on research into abusing token privileges for escalation of privilege. Please feel free to ping us with questions, ideas, insults, or bugs...

GhostLock-OPPO-PCKM00

GhostLock — OPPO PCKM00 4.14.180 PoC CVE-2026-43499 GhostLock — Linux kernel futex priority-inheritance use-after-free local privilege escalation PoC, ported to the OPPO PCKM00 OP4A57, SM6150, Android 11, kernel 4.14.180-perf+. DISCLAIMER / 免责声明 This project is for authorized security research an...

GroupPolicyBackdoor

GroupPolicyBackdoor GroupPolicyBackdoor 는 GPO그룹 정책 개체 조작 및 악용을 위한 Python 유틸리티입니다. GPO 공격 벡터는 Active Directory 환경에서 파급력 있는 권한 상승 시나리오로 이어지는 경우가 매우 많습니다. 그런데도 공격 보안 전문가들은 부분적으로 GPO 조작과 관련된 위험에 대한 인식 때문에 이를 활용하는 것을 주저할 수 있습니다. GroupPolicyBackdoor는 GPO 공격 벡터를 위한 모듈식이고 안정적이며 은밀한 악용 프레임워크를 Python으로 제공하...

CVE-2023-3460

CVE-2023-3460 The Ultimate Member WordPress plugin before 2.6.7 does not prevent visitors from creating user accounts with arbitrary capabilities, effectively allowing attackers to create administrator accounts at will. This script perform an exploit for this vulnerability and scan different...

CVE-2019-15511

GOG Galaxy Exploit for CVE-2019-15511 usage: exploit.py -h --action LaunchElevatedRequest,FixDirectoryPrivilegesRequest,CreateDirectoryRequest,QueryProcessInfoRequest,InstallServiceRequest,DeleteServiceRequest,MoveAndVerifyGlobalDependencyRequest target positional arguments: target optional...

CVE-2026-108119

A flaw was found in busybox. The tar applet's deferred link-creation handling for symlink and hardlink entries with unsafe-looking targets does not validate that the resolved destination remains inside the extraction directory once the deferred link is created. An attacker can craft a tar archive...

CVE-2024-32019-POC

CVE-2024-32019-POC Netdata ndsudo local privilage escalation workflow and POC CVE-2024-32019 Workflow Automatic exploit Resources Workflow !TIP Please read Netdata is a tool that provides apps and systems monitoring, it runs at port 19999, easy to find: test@test:$ netstat -tuln Active Internet...

CVE-2015-1318

CVE-2015-1318 Exploit I used to claim 10% final-grade extra credit in Matthew Might's Compilers class. https://bugs.launchpad.net/apport/+bug/1438758 Bonus opportunities http://matt.might.net/teaching/compilers/spring-2015/ Use an exploit on vulcan to gain root access: +10% for a local user...

EscalateGPT

Introducción Herramienta de Identificación de Escalada de Privilegios IAM Características 🛠️ Identifica posibles problemas de escalada de privilegios en políticas de AWS IAM y Azure RBAC 💻 Utiliza los modelos de IA más avanzados a través de OpenAI para el análisis 👍 Devuelve rutas de escalada y...

CVE-2016-4669

CVE-2016-4669 Imperfect exploit code, for learning purposes only : 1 Compilation method Just run make 2 Function If successful, it can obtain root privileges. But the success rate is not high. 3 General overview Relatively stable creation of a dangling port. Cannot stably reuse the port with root...

acunetix_0day

Acunetix 0day RCE - SYSTEM Acunetix 0day RCE Usage Run script with dzonerzy:dvm dzonerzy$ python /Users/dzonerzy/PycharmProjects/natbypass/acu0day.py 9999 172.16.24.1 Acunetix WVS 10 - SYSTEM Remote Command Execution Daniele Linguaglossa Payload: Meterpreter reverse TCP 4444 Exploit started on po...

PowerPriv

PowerPriv DESCRIPCIÓN Una implementación en PowerShell de PrivExchange por @dirkjan código original aquí: https://github.com/dirkjanm/PrivExchange/blob/master/privexchange.py Útil para entornos en los que no se pueden ejecutar aplicaciones basadas en Python, se tienen credenciales de usuario o no...

Win10Pcap-Exploit

Win10Pcap-Exploit credit to https://twitter.com/R00tkitSMM [email protected] telegram username : https://telegram.me/firozi some day ago i found vulnerability in win10pcap Driver that can lead to Privilege escalation i report vulnerability and now bug is fixed : www.win10pcap.org/download/ s...

uacscript

UAC Bypass Vulnerability in Windows Script Host The Windows Script Host executables suffer from a vulnerability due to a missing embedded manifest. Using another exploit, the combination of "wusa.exe" and "makecab.exe" files can be copied to the Windows folder. Copies of a manifest and the script...

WordPress Blocksy Companion plugin <= 2.1.58 - Unauthenticated Privilege Escalation to 'role' Parameter vulnerability

Unauthenticated Privilege Escalation to 'role' Parameter vulnerability discovered by Sawyer in WordPress Plugin Blocksy Companion versions = 2.1.58...

CVE-2020-1066-EXP

Reference This vulnerability belongs to the Windows CardSpace service that does not properly handle symbolic link objects, leading to a local privilege escalation via arbitrary file replacement. Disclaimer The author's PoC is for research purposes only. If readers use this PoC for other activitie...

CVE-2021-33909

CVE-2021-33909 Secuoya Informe gcc exploit.c -o exploit -lpthread -DBLOCKVIAUSERFAULTFD gcc exploit.hello.c -o exploit.hello -lpthread -lfuse -DFILEOFFSETBITS=64 $ mkdir dir $ ./exploit $pwd/dir id...

CVE-2023-28252-Compiled-exe

CVE-2023-28252-Compiled-exe A modification of Fortra's excellent CVE-2023-2852 Privesc Exploit. Works on Windows 11 21H2 clfs.sys version 10.0.22000.1574 - also works on Windows 10 21H2, Windows 10 22H2, Windows 11 22H2 and Windows server 2022. This version retains the original functionality, but...

CVE-2022-25943

CVE-2022-24934 Vulnerability Overview When installing WPS Office, the service program wpscloudsvr is installed with administrator privileges. This service is configured for manual start, but the access control list ACL attributes of the folder where the service program resides are misconfigured...