Windows-Local-Privilege-Escalation-Cookbook

Windows Local Privilege Escalation Cookbook Table of Contents Windows Local Privilege Escalation Cookbook Table of Contents Disclaimer Description Keynote Definition Useful Tools Vulnerabilities References Disclaimer This repository, "Windows Local Privilege Escalation Cookbook" is intended for...

CVE-2025-32462-Exploit

CVE-2025-32462-Exploit: Matrix-Sudo Escape Hostname Spoofing Privilege Escalation CVE-2025-32462 "You take the blue pill... the story ends. You take the red pill... you get root." Description This exploit demonstrates a privilege escalation vulnerability in sudo CVE-2025-32462 where hostname-base...

CVE-2022-37706

CVE-2022-37706 Exploit: Enlightenment v0.25.3 Privilege Escalation Description This repository contains an exploit for CVE-2022-37706 , a local privilege escalation vulnerability in Enlightenment v0.25.3 and earlier. The vulnerability exists due to improper handling of pathnames starting with the...

CVE-2025-68921

CVE-2025-68921 A local privilege escalation vulnerability exists in Nahimic, an audio enhancement software pre-installed on many gaming laptops. The issue allows a low-privileged user to escalate privileges to NT AUTHORITY\SYSTEM . This vulnerability was reported to Lenovo PSIRT, tracked as...

CVE-2023-2640-32629

Ubuntu Privilege Escalation: CVE-2023-2640 and CVE-2023-32629 This is a local privilege escalation vulnerability affecting certain Ubuntu kernels. It allows unprivileged users to set privileged extended attributes on mounted files, bypassing security checks and potentially gaining elevated...

CVE-2025-32462-POC

CVE-2025-32462 – sudo -h Privilege Escalation PoC 🚨 Local privilege escalation exploit for sudo via the -h/--host argument Affects systems with sudo misconfigurations allowing unintended root access. 🧠 About This PoC demonstrates CVE-2025-32462 , a logic flaw in sudo all versions ≤ 1.9.17, where...

CVE-2019-0708-Exploit

CVE-2019-0708-Exploit Using CVE-2019-0708 to Locally Promote Privileges in Windows 10 System...

CVE-2022-1015

CVE-2022-1015 This repository contains a PoC for local privilege escalation of CVE-2022-1015, a bug in the nftables component of the linux kernel that I found. You can read a detailed analysis of this vulnerability and the exploitation strategy over at my blog. Right now, the exploit is a bit...

cve-2025-32463

CVE-2025-32463-sudo-chwoot PoC for CVE-2025-32463 - Sudo chroot Elevation of Privilege Vulnerability Original PoC sudo-chwoot.sh CTF Demo chwoot-demo.c Docs Write-up: https://www.stratascale.com/vulnerability-alert-CVE-2025-32463-sudo-chroot Advisory:...

CVE-Writeups

CVE-Writeups Security vulnerability research writeups. CVE-2026-50402: Windows NTFS Elevation of Privilege CVSS 7.8...

CVE-2025-27519

Below Privilege Escalation Exploit CVE-2025-27519 This repository contains a proof-of-concept PoC Bash script to exploit the Below privilege escalation vulnerability CVE-2025-27519 on Linux systems. The exploit allows a local user to escalate privileges to root by abusing the way the below binary...

concealed_position

Posición Oculta Posición Oculta es un ataque de escalada de privilegios locales contra Windows que utiliza el concepto de "Trae tu propia vulnerabilidad". Específicamente, Posición Oculta CP utiliza la lógica tal como fue diseñada de paquete punto e impresión en Windows que permite a un usuario c...

NoFilter

NoFilter Tool for abusing the Windows Filtering Platform for privilege escalation. It can launch a new console as "NT AUTHORITY\SYSTEM" or as another user that is logged on to the machine. Usage Usage: NoFilter.exe -s SESSIONID Credits Ron Ben Yizhak References DEF CON talk...

CVE-2021-4034

CVE-2021-4034 A stupid poc for CVE-2021-4034 - Local privilege escalation pkexec SUID binary Vulnerability explained in the advisory here...

CVE-2026-56906

A use-after-free vulnerability exists in the ep_free function of eventpoll.c , caused by a race condition . Additionally, memory corruption via use-after-free was identified in ep_get_upwards_depth_proc within fs/eventpoll.c . This flaw could allow for local escalation of privilege without requir...

CVE-2026-55270

In dialInternal in multiple locations, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28625

In multiple locations, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-92626

In multiple locations, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28625

A logic error in the code across multiple locations allows for a permission bypass . This vulnerability can lead to a local escalation of privilege without requiring additional execution privileges or user interaction. Exploitation details and specific remediation steps are not provided in the do...

CVE-2026-58854

CVE-2026-58854 identifies a memory corruption vulnerability caused by type confusion in multiple locations. This flaw could enable local escalation of privilege without requiring additional execution privileges or user interaction. No specific software, versions, or remediation details are provid...