34143 matches found
CVE-2024-49138-POC
CVE-2024-49138-POC ๅฉ็จ CVE-2024-49138 ๅจ CLFS.sys ไธญ็ๆฆๅฟต้ช่ฏไปฃ็ ใ CrowdStrike ๆฃๆตๅฐ่ฏฅๆผๆดๆญฃ่ขซๅจ่่กไธบ่ ็งฏๆๅฉ็จใ ๅทฒๅจ Windows 11 23h2 ไธๆต่ฏใ ่ฏฆ็ปๅๆ่ฏท่งๆญคๅคใ ไปฅไธๆฏ็จไบๆต่ฏ POC ็ ntoskrnl.exe ๅ clfs.sys ็ๅๅธๅผใ root@kitploit: PS C:\Windows\System32\drivers Get-FileHash .\clfs.sys Algorithm Hash Path --------- ---- ---- SHA256...
AutoLocalPrivilegeEscalation
AutoLocalPrivilegeEscalation Linuxใซใผใใซๅใใฎๅฏ่ฝๆงใฎใใใจใฏในใใญใคใใexploitdbใใใใฆใณใญใผใใใ่ชๅ็ใซใณใณใใคใซใใ่ชๅๅในใฏใชใใ ใใฎในใฏใชใใใฏHackademicsใซ่งฆ็บใใใฆไฝๆใใใพใใใใใฎใซใผใใซใใผใธใงใณใซใฏๅคๆฐใฎๅฏ่ฝๆงใฎใใใจใฏในใใญใคใใใใใพใใใOSCPใฎๅๅฟ่ ใจใใฆๆญฃใใใจใฏในใใญใคใใ่ฆใคใใใใใใพใไธใคไธใคใในใใใใฎใ้ขๅใ ใฃใใใใใใฎในใฏใชใใใๅฐๆฅๅฝน็ซใคใใจใ้กใฃใฆใใพใใ ใพใใsearchsploitใไฝฟ็จใใฆใญใผใซใซใใฃใฌใฏใใชๅ ใฎexploitdbใใLinuxใฎ็นๆจฉๆๆ ผใๆค็ดขใใพใใ...
DavRelayUp
DavRelayUp KrbRelayUp ใฎ็ฐกๆ็งปๆค็ใงใNTLMใชใฌใผใWebDAVใใLDAPใธ่กใใใใฎไฟฎๆญฃใๅ ใใไปฅไธใฎๆปๆใใชใใใฃใใฎๆช็จใๅน็ๅใใพใ๏ผ 0. ๏ผใชใใทใงใณ๏ผๆฐใใใใทใณใขใซใฆใณใใฎไฝๆ๏ผNew-MachineAccount๏ผ 1. WebClientใตใผใในใฎๅผทๅถ้ๅง 2. WebDAVใชใฌใผใตใผใใผใฎ่ตทๅ๏ผGoRelayServer โ Costura.Fodyใไฝฟ็จใใฆDavRelayUpใซๅใ่พผใพใใGolang DLL๏ผ 3. ใญใผใซใซใใทใณใขใซใฆใณใ่ช่จผใฎๅผทๅถ๏ผSharpSystemTriggers๏ผ 4. NTLMใชใฌใผใใLDAPใธ 5...
RegPwnBOF
RegPwn BOF Cobalt Strike BOF ็งปๆค่ช Filip Dragovic @Wh04m1001 / MDSec ActiveBreach ็ RegPwn ๆผๆดๅฉ็จ็จๅบใ ่ฟๆฏๅๅง C ๆผๆดๅฉ็จ็จๅบ็็ฒ็ณ BOF ้ๆฐๅฎ็ฐใๆๆๆผๆด็ ็ฉถๅๅฉ็จ็ๅๅณๅฝไบ Filip Dragovic ๅ MDSecใ ๅๆ : https://www.mdsec.co.uk/2026/03/rip-regpwn/ ๅๅงไปๅบ : https://github.com/mdsecactivebreach/RegPwn CVE : CVE-2026-24291 ๅ่ฝ ๅฉ็จ Windows...
AV-EDR-Killer
AV/EDR Killer https://github.com/user-attachments/assets/1eda3340-2af2-4136-b74e-be7a3f4b3924 Este proyecto demuestra cรณmo un controlador legรญtimo y firmado puede ser armado para obtener acceso a nivel de kernel. ๐จ El controlador vulnerable: wsftprm.sys, firmado por TPZ SOLUCOES DIGITAIS LTDA, y...
CVE-2021-34527
CVE-2021-34527 - PrintNightmare ๆฌๅฐๆ้ๆๅ PowerShell Caleb Stewart | John Hammond | 2021ๅนด6ๆ1ๆฅ ๆดๆฐ 2021ๅนด6ๆ2ๆฅ ๏ผๅพฎ่ฝฏๅๅธไบๅ ณไบ CVE-2021-34527 ็ๅฎๅ จๅ ฌๅ๏ผๅฐ่ฏฅ็นๅฎๆ ่ฏ็ฌฆๆญฃ็กฎๅฝๅไธบ PrintNightmare ๆผๆดๅฉ็จใไนๅ๏ผ็คพๅบไธ็ด่ฎคไธบ CVE-2021-1675 "ๅฐฑๆฏ PrintNightmare"๏ผๅ ไธบ6ๆ8ๆฅ็่กฅไธๅนถๆช่งฃๅณๆญค้ฎ้ขใๆญคไปๅบไธๅๅงไปๅบ ็ธๅ๏ผๅชๆฏ CVE ๅ็งฐไธๅใ CVE-2021-34527 ๆฏไธไธชๅ ณ้ฎ็่ฟ็จไปฃ็ ๆง่กๅๆฌๅฐๆ้ๆๅๆผๆด๏ผ่ขซ็งฐไธบ...
lxd_root
้่ฟ LXD ๅฎ็ฐ Linux ็นๆๆๅ ๆฆ่ฟฐ Linux ็ณป็ปไธๆฌๅฐ lxd ็ป็ๆๅๆๅค็ง้ๅพๅฐๅ ถๆ้ๆๅ่ณ rootใๆฌไปๅบๅ ๅซๅ จ่ชๅจๆฌๅฐ root ๅฉ็จ็คบไพใๆผๆด็่ฏฆ็ป่งฃ้ๅๅฉ็จๆผ็ปๅฏๅจๆ็ๅๅฎข ๆญคๅค ๆพๅฐใ ไปฅไธๅฉ็จๅนถ้ๅฎนๅจ้้ธ๏ผ่ๆฏ ๅฉ็จ ๅฎนๅจๅนถ ้ๅฏน ๅฎฟไธปๆไฝ็ณป็ป็ๆฌๅฐ root ๅฉ็จใๆๅๅฉ็จ้่ฆๅฎฟไธป็ฏๅข็ไฝๆ้่ฎฟ้ฎใ ๆ็ธไฟกๆๅจ็ฌฌไบไธช็ๆฌไธญ็็ญ็ฅๆฏ็ฌ็น็๏ผๅนถไธ่ถณๅคๆ่ถฃ๏ผ่ณๅฐๅฏนๆๆฅ่ฏด๏ผไปฅ่ณไบๅจไปฅไธ้พๆฅ็ๅๅฎขไธญๅไบ่ฏฆ็ป่งฃ้ใ lxdrootv1.sh ๅฐๅฎฟไธปๆบ็ / ๆไปถ็ณป็ปๆ่ฝฝๅฐๅฎนๅจไธญ๏ผๅจๅฎนๅจๅ ๅฎฟไธปๆบ็ไฝๆ้็จๆทๅ ทๆ root ่ฎฟ้ฎๆ้ใๆญค root...
Sherlock
Deprecated. Have a look at Watson instead. Sherlock PowerShell script to quickly find missing software patches for local privilege escalation vulnerabilities. Currently looks for: MS10-015 : User Mode to Ring KiTrap0D MS10-092 : Task Scheduler MS13-053 : NTUserMessageCall Win32k Kernel Pool...
Ubuntu-LPE
Este repositorio no tiene un README...
linux-kernel-exploits
linux-kernel-exploits ็ฎไป linux-kernel-exploits ๆผๆดๅ่กจ CVE Description Kernels CVEโ2018โ18955 mapwrite in kernel/usernamespace.c allows privilege escalation Linux kernel 4.15.x through 4.19.x before 4.19.2 CVEโ2018โ1000001 glibc glibc 2.6.22 released in 2007 CVE-2016-2384 a double-free in USB MIDI...
PoC-in-GitHub
PoC in GitHub 2026 CVE-2026-0009 2026-06-01 ๅจๅคไธชไฝ็ฝฎๅญๅจๅ ไปฃ็ ้ป่พ้่ฏฏ่ๅฏผ่ด็็นๅปๅซๆๅฏ่ฝๆงใ่ฟๅฏ่ฝๅฏผ่ดๆฌๅฐๆ้ๆๅ๏ผไธๆ ้้ขๅคๆง่กๆ้ใๅฉ็จๆญคๆผๆดไธ้่ฆ็จๆทไบคไบใ cduram/NotCVE-2026-0009 CVE-2026-0013 2026-03-02 ๅจ PickActivity.java ็ setupLayout ไธญ๏ผ็ฑไบๆททๆทไปฃ็๏ผconfused deputy๏ผ้ฎ้ข๏ผๅญๅจไธ็งๅฏ่ฝ็ๆนๅผไปฅ DocumentsUI ๅบ็จ่บซไปฝๅฏๅจไปปๆๆดปๅจใ่ฟๅฏ่ฝๅฏผ่ดๆฌๅฐๆ้ๆๅ๏ผไธๆ ้้ขๅคๆง่กๆ้ใๅฉ็จๆญคๆผๆดไธ้่ฆ็จๆทไบคไบใ...
CVE-2026-43499_HW-CLT-AL01
CVE-2026-43499 Android arm64 ๆฌๅฐๆๆ้้ English | ไธญๆ Este es un proyecto de adaptaciรณn de escalada de privilegios local para Android arm64 basado en CVE-2026-43499. El proyecto genera target.h segรบn el boot.img y la informaciรณn del perfil del dispositivo de destino, y luego compila el correspondiente...
CVE_2019_2215
CVE-2019-2215 - Android Binder UAF Local Privilege Escalation A rewritten Proof-of-Concept / Local Privilege Escalation LPE exploit targeting CVE-2019-2215 , a Use-After-Free vulnerability in the Android Binder driver. I have provided the vulnerable kernel build in the vulnerablekernelbuilds...
CVE-2021-4034
ๆฆๅฟต้ช่ฏ๏ผProof of Concept๏ผ๏ผCVE-2021-4034 PwnKit ๆณจๆ๏ผ ๆฌๅญๅจๅบๅๅ ถๅ ๅฎนๆฏๆฏไธ่ฎบๆ๏ผGrAL๏ผ็ไธ้จๅ๏ผไป ๅบไบๆๅญฆ็ฎ็ๅๅญฆๆฏ็ ็ฉถ่ๅๅปบใ ๆ่ฟฐ ๆฌๅญๅจๅบๅ ๅซ้ๅฏน CVE-2021-4034 ๆผๆด๏ผไน็งฐไธบ PwnKit๏ผ็ๆฆๅฟต้ช่ฏ๏ผPoC - Proof of Concept๏ผใๆญคๅ ๅญ็ ดๅๆผๆดๅฝฑๅ Linux ็ณป็ปไธญ Polkit ็ pkexec ็ปไปถใๅฝ pkexec ไปฅ็ฉบๅๆฐๅ่กจ๏ผargc == 0๏ผๆง่กๆถ๏ผๅฏไปฅๆ็บต็ฏๅขๅ้๏ผ่ฟซไฝฟๅ ถๅ ่ฝฝไปปๆๅ ฑไบซๅบ๏ผไป่ๅฎ็ฐๆฌๅฐๆ้ๆๅใ ๅฉ็จ้ถๆฎต๏ผ็ฏๅขๅๆ๏ผ...
CVE-2016-5195
CVE-2016-5195๏ผDirty COW Linux ๅ ๆ ธ็ซๆๆกไปถ ้ๅฏน CVE-2016-5195๏ผDirty COW๏ผ็้ฒๅพกๆง็ ็ฉถใ้ๆญฆๅจๅ้ช่ฏไธ่กฅไธๅๆใ่ฏฅๆผๆดๆฏ Linux ๅ ๆ ธไธญ็ๅๆถๅคๅถ๏ผcopy-on-write๏ผ็ซๆๆกไปถ๏ผๅฏๅ ่ฎธๆฌๅฐ็จๆทไฟฎๆนไธๅช่ฏปๅ ๅญๆ ๅฐๅ ณ่็ๆฐๆฎ๏ผๅนถ่ทๅพๆๅ็ๆ้ใ ๅญๆฎต| ๅผ ---|--- ็ปไปถ| Linux ๅ ๆ ธๅ ๅญ็ฎก็ / getuserpages ๅผฑ็น| CWE-362๏ผไฝฟ็จๅ ฑไบซ่ตๆบ่ฟ่กๅนถๅๆง่กไฝๅๆญฅไธๅฝ ไธฅ้ๆง| ้ซๅฑ๏ผCVSS 3.1๏ผ7.0 ๆปๅปๅ้|...
EvilOSX
EvilOSX ไธๆฌพ้ๅฏน macOS / OS X ็้ชๆถ RAT๏ผ่ฟ็จ็ฎก็ๅทฅๅ ท๏ผใ ๅฎ็ๆๅจ ็ฑ Cedric Owens ็ผๅ ๆญค้กน็ฎไธๅๆดป่ท ็นๆง ๆจกๆ็ป็ซฏๅฎไพ ็ฎๅๅฏๆฉๅฑ็ๆจกๅ็ณป็ป ๆ ๅตๅฐธไพ่ต๏ผ็บฏ Python๏ผ ๅ็ ๆฏ่ฝฏไปถๆ ๆณๆฃๆต๏ผOpenSSL AES-256 ๅ ๅฏ็่ด่ฝฝ๏ผ ๆไน ๅ ๆฏๆ GUI ๅ CLI ๆฃ็ดข Chrome ๅฏ็ ๆฃ็ดข iCloud ไปค็ๅ่็ณปไบบ ๆฃ็ดข/็ๆงๅช่ดดๆฟ ๆฃ็ดขๆต่งๅจๅๅฒ่ฎฐๅฝ๏ผChrome ๅ Safari๏ผ ้่ฟ iTunes ้้ฑผ iCloud ๅฏ็ iTunes๏ผiOS๏ผๅคไปฝๆไธพ ๅฝๅถ้บฆๅ ้ฃ ๆๆๆก้ขๆชๅพๆไฝฟ็จๆๅๅคดๆ็ ง ๅฐ่ฏ้่ฟๆฌๅฐๆๆ่ทๅพ...
CVE-2026-46300_Fragnesia
๐งจ Fragnesia โ CVE-2026-46300 Linux ๅ ๆ ธ LPE ๅฎก่ฎกไธ Exploit ๅทฅๅ ทๅ ยท Page-Cache / XFRM ESP-in-TCP๏ผespintcp๏ผๅๅฝ ไบคไบๅผๅฎก่ฎก โ ๆฃๆต LPE ๅ็ฝฎๆกไปถ โ ่ชๅจๆง่ก exploit๏ผ็ป็กฎ่ฎคๅ๏ผ โ ๏ธ ้ๅพทไธๆณๅพ่ญฆๅ ๆฌๅทฅๅ ทไป ็จไบๅๆณไธ็ปๆๆ็ๅฎๅ จๆต่ฏ โโๅ็บฆๆธ้ๆต่ฏใๅฎ้ช/CTF๏ผๆ่ชๆ่ตไบงใๆช็ป็ณป็ปๆๆ่ ่ฎธๅฏไฝฟ็จๅณๅฑ็ฏ็ฝช่กไธบ๏ผUU ITEใComputer Fraud and Abuse Act ็ญ๏ผใไฝฟ็จ่ ๆฟๆ ๅ จ้จ่ดฃไปปใ ๐ ๆผๆดๆฆ่ฟฐ CVE-2026-46300 ๆฏ Linux ๅ ๆ ธไธญ็ไธไธช...
CVE-2026-68398
CVE-2026-68398: Ubuntu PPPoL2TP use-after-free to local root This repository contains a build-specific local privilege-escalation exploit for CVE-2026-68398 , a use-after-free race between PPPoL2TP receive processing and destruction of an unattached PPP channel. It was validated in QEMU against t...
CVE-2025-49173
CVE-2025-49173 โ macOS 10.9 Local Root Privilege Escalation Research Status: Unofficial / Research-Based Platform: macOS Mavericks 10.9 Impact: Local Privilege Escalation โ Root Severity: High Local This repository contains a proof-of-concept PoC security research project focused on a local root...
CVE-2026-23111-POC-noddlenpottato
CVE-2026-23111 โ noddlenpottato nftables catchall UAF โ unprivileged LPE. user to root on most 5.10โ6.18 linux kernels. auto-adapts to the target kernel โ detects struct offsets, resolves symbols, finds ROP gadgets, determines slab cache, generates tailored exploit, compiles and runs. nftables...