CVE-2024-0670

CVE-2024-0670 PoC This repository provides a Proof of Concept PoC exploit for the CVE-2024-0670 vulnerability, affecting the CheckMK Agent on Windows systems. The vulnerability occurs when the CheckMK Agent creates and executes temporary files in the C:\Windows\Temp directory. An attacker can abu...

AutoLocalPrivilegeEscalation

AutoLocalPrivilegeEscalation An automated script that download potential exploit for linux kernel from exploitdb, and compile them automatically This script is created due to Hackademics, there are so much possible exploit for that version of kernel, as a rookie OSCP student, I am not able to fin...

CVE-2021-4034

CVE-2021-4034 Local privilege escalation via pkexec YouTube video Watch the ✨ YouTube Video Run locally make all && ./pwnkit && make clean Run in docker Build the docker image docker build -t pwnkit . Run the exploit docker run -it pwnkit bash make all && ./pwnkit && make clean Detect using...

exploits

exploits CVE-2021-22600: Linux kernel LPE exploit CVE-2021-3156: Linux local privilege escalation through heap overflow in sudo Demo CVE-2021-3156: One shot exploit for heap overflow vulnerability in sudo CVE-2020-6507: Out of bounds write in V8. Chrome versions = 83.0.4103.97. RCE CVE-2020-16040...

CVE-2019-6225-macOS

CVE-2019-6225 Local Privilege Escalation for macOS ≤ 10.14.2 via CVE-2019-6225 Not yet tested on other machines, some hardcoded values might be incorrect. Does NOT work on machines with SMAP. It will crash your machine on the second run, no matter how the first run was. Most of the code are based...

RegPwn

RegPwn Exploit for blog post - https://www.mdsec.co.uk/2026/03/rip-regpwn/ Exploit code for LPE in Windows clients and servers Tested versions: Windows 11 25h2 Windows 11 24h2 Windows 10 21h2 Windows Servers 2016/2019/2022 Tracked as CVE-2026-24291 Author : Filip Dragovic...

CVE-2022-0185-Case-Study

CVE-2022-0185-Case-Study This case study is a result of an assignment of ECE 9069: Introduction to Hacking : https://whisperlab.org/introduction-to-hacking/ CVE-2022-0185 Overview CVE-2022-0185 is a heap-based buffer overflow flaw was found in the way the legacyparseparam function in the Filesyst...

AV-EDR-Killer

AV/EDR Killer https://github.com/user-attachments/assets/1eda3340-2af2-4136-b74e-be7a3f4b3924 This project demonstartes how a legit, and signed driver can be weponized to gain kernel level access. 🚨 The vulnerable driver: wsftprm.sys , signed by TPZ SOLUCOES DIGITAIS LTDA, and previously exposed ...

CVE-2023-4911

glibc Heap Buffer Overflow Vulnerability CVE-2023-4911 Item| Description ---|--- CVE ID| CVE-2023-4911 Attack Type| Heap Buffer Overflow → Local Privilege Escalation CVSS 3.1| 7.8 High Disclosure Date| 2023-10-03 Vulnerability Point| glibc dynamic loader ld.so GLIBCTUNABLES parser Affected...

CVE-2021-1675

CVE-2021-1675 - PrintNightmare LPE PowerShell Caleb Stewart | John Hammond | June 1, 2021 CVE-2021-1675 is a critical remote code execution and local privilege escalation vulnerability dubbed "PrintNightmare." Proof-of-concept exploits have been released Python, C++ for the remote code execution...

qq-tim-elevation

Tencent QQ/TIM Local Privilege Elevation Affected Products: QQ 9.7.1.28940 9.7.8.29039 TIM 3.4.5.22071 3.4.7.22084 Affected Components: QQProtect.exe 4.5.0.9424 in TIM 3.4.5.22071 QQProtect.exe 4.5.0.9426 in QQ 9.7.1.28940 QQProtectEngine.dll 4.5.0.9424 in TIM 3.4.5.22071 QQProtectEngine.dll...

Ubuntu-LPE

This repository does not have a README...

CVE-2026-43499-warhol-root

warhol-root CVE-2026-43499 IonStack local privilege escalation, ported to the Xiaomi 17T Pro warhol — MediaTek MT6993, Android 16. GKI 6.12 / android16 only. The waiter overlay, the pselect stack layout and every struct offset are pinned to that branch, so nothing here transfers to 6.6, 6.1 or 5....

CVE-2021-1675-LPE

Local Privilege Escalation Edition of CVE-2021-1675/CVE-2021-34527 Local Privilege Escalation implementation of the CVE-2021-1675/CVE-2021-34527 a.k.a PrintNightmare. The exploit is edited from published by Zhiniang Peng @edwardzpeng & Xuefeng Li @lxf02942370. Open the project on MSVC and compile...

CVE-2023-0179-PoC

Needle CVE-2023-0179 exploit This repository contains the exploit for my recently discovered vulnerability in the nftables subsystem that was assigned CVE-2023-0179, affecting all Linux versions from 5.5 to 6.2-rc3, although the exploit was tested on 6.1.6. The vulnerability details and writeup c...

CVE-2016-6187_LPE

CVE-2016-6187 - Linux Kernel Exploit Kernel Exploit for CVE-2016-6187 Local Privilege Escalation affected versions: 4.6.5 Exploit was developed against a custom compiled 4.6 kernel + buildroot kconfig coming soon and defeats KASLR, SMEP, SMAP KPTI not available for 4.6 Presentation slides...

CVE-2020-24955

CVE-2020-24955 SUPERAntiSpyware Professional X Trial = 10.0.1206 Local Privilege Escalation SUPERAntiSpyware Professional X Trial versions prior to 10.0.1206 are vulnerable to local privilege escalation because it allows unprivileged users to restore quarantined files to a privileged location...

CVE-2024-0197-POC

CVE-2024-0197-POC Proof of concept for Local Privilege Escalation in Thales Sentinel HASP LDK. I initially wanted to develop one, but eventually that turned out to be unnecessary. There is no race condition to win, and a simple DLL search order hijacking from a known location suffices to attain...

my-CVE-2021-1675

= Print Nightmare Analysis Report :imagesdir: Figures :toc: :icons: font :figure-caption: Figure :xrefstyle: short :pdf-theme: basic-theme.yml On June 29, 2021, a very severe Windows Print Spooler vulnerability was exposed as a 0-day, with a base score of 8.8, and was published on GitHub now...

CVE-2022-31262

CVE-2022-31262 GOG Galaxy 2.X LPE Exploit CVE-2022-31262 Tested Versions 2.0.46 - 2.0.51 latest at 11.08.2022, older versions may also be vulnerable Blog Post about the finding: https://secure77.de/gog-galaxy-cve-2022-31262/ LPE found via: https://github.com/secure-77/PSAccessFinder POC Demo Than...