SpoolFool

SpoolFool Exploit for CVE-2022-21999 - Windows Print Spooler Elevation of Privilege Vulnerability LPE Details The provided exploit should work by default on all Windows desktop versions. Please see the blog post for full technical details here. Usage root@kitploit: PS C:\SpoolFool .\SpoolFool.exe...

CVE-2024-23897

CVE-2024-23897 Nuclei Template For Exploit CVE-2024-23897 This template serves as a crucial warning to all users if the CVE-2024-23897 local file vulnerability is detected within your system, it is imperative to take. immediate action and patch your systems without delay. This vulnerability poses...

cve-2025-5054

CVE-2025-5054 Vulnerability Detection Tool A Python tool to check if your Ubuntu system is vulnerable to CVE-2025-5054, a race condition in Apport that allows local information disclosure. This tool performs a series of checks to determine your system's status and provides recommendations if you...

sudoinjection

CVE-2025-32463: Local Privilege Escalation via sudo -R NSS Injection Summary This PoC demonstrates local privilege escalation on Linux systems via abuse of the sudo -R option in conjunction with a custom NSS module. It targets the vulnerability CVE-2025-32463, which stems from unsafe handling of...

SMBGhost-LPE-Metasploit-Module

SMBGhost-LPE-Metasploit-Module Esta es una implementación de la vulnerabilidad CVE-2020-0796, también conocida como SMBGhost, compatible con Metasploit Framework Notas: Este módulo está diseñado para usarse cuando tienes un shell válido para escalar privilegios. Puedes cambiar el payload, si dese...

CVE-2018-17182

CVE-2018-17182 Linux Kernel VMA-UAF Privilege Escalation Vulnerability CVE-2018-17182 About Google Project Zero security researchers released details and a proof-of-concept PoC exploit for a high-severity vulnerability in the Linux kernel present since kernel versions 3.16 through 4.18.8...

CVE-2011-1485-pkexec-exploit

CVE-2011-1485 Linux pkexec and polkitd 0.96 race condition privilege escalation exploit. Developed in 2011 by Antonius ev1lut10n / w1sdom...

Eaton-Intelligent-Power-Manager-Local-File-Inclusion

Eaton-Intelligent-Power-Manager-Local-File-Inclusion Local file inclusion in Eaton Intelligent Power Manager v1.6 allows an attacker to include a file, it can lead to sensitive information disclosure, denial of service and code execution. CVE-2018-12031 To exploit vulnerability, someone could use...

CVE-2021-4034

CVE-2021-4034 PoC for PwnKit: Local Privilege Escalation Vulnerability in polkit’s pkexec in Python Usage root@kitploit: git clone https://github.com/rvizx/CVE-2021-4034 cd CVE-2021-4034 python3 cve-2021-4034-poc.py Notes C : https://github.com/arthepsy/CVE-2021-4034 Fix root@kitploit: sudo chmod...

CVE-2025-61228

CVE-2025-61228 Alert This issue appears to be worse than the developer suggests, so I don't want this part to be lost in the weeds. The developer noted on their blog: This can only happen if a program running on your system is looking for SuperDuper to perform an update, a real update is presente...

CVE-2020-1066-EXP

Reference This vulnerability belongs to the Windows CardSpace service that does not properly handle symbolic link objects, leading to a local privilege escalation via arbitrary file replacement. Disclaimer The author's PoC is for research purposes only. If readers use this PoC for other activitie...

linuxprivchecker

Linuxprivchecker.py A Linux Privilege Escalation Check Script Orginal Author: Mike Czumak Tv3rn1x -- @SecuritySift Current Maintainer: Michael Contino @Sleventyeleven This script is intended to be executed locally on a Linux box to enumerate basic system info and search for common privilege...

CVE-2016-6187_LPE

CVE-2016-6187 - Linux Kernel Exploit Kernel Exploit for CVE-2016-6187 Local Privilege Escalation affected versions: 4.6.5 Exploit was developed against a custom compiled 4.6 kernel + buildroot kconfig coming soon and defeats KASLR, SMEP, SMAP KPTI not available for 4.6 Presentation slides...

CVE-2025-32463_chwoot

CVE-2025-32463sudochwoot Declaration: This script is only for security testing and should not be used for illegal purposes. CVE-2025-32463 sudochwoot privilege escalation vulnerability verification script Description Compared to other POCs available on the Internet, this script takes into account...

CVE-2025-32463

CVE-2025-32463 Local Privilege Escalation in Sudo via Malicious nsswitch.conf with sudo -R. Affected versions 1.9.14 – 1.9.17 📘 Introduction Sudo is a widely used command-line utility on Unix-like systems that allows permitted users to execute commands with elevated privileges. It plays a critica...

PoC-in-GitHub

PoC in GitHub 2026 CVE-2026-0009 2026-06-01 In multiple locations, there is a possible tapjacking due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2019-1215

CVE-20190-1215 ws2ifsl.sys UAF exploit for Windows 10 19H1 x64 This exploit uses the recently patched use after free vulnerability CVE-2019-1215 in ws2ifsl.sys to achieve local privilege escalation. The exploit targets Windows 10 19H1 1901 x64 and demonstrates how to bypass kASLR, kCFG and SMEP...

procrustes

Procrustes A bash script that automates the exfiltration of data over dns in case we have a blind command execution on a server where all outbound connections except DNS are blocked. The script currently supports sh, bash and powershell and is compatible with exec style command execution e.g...

linux-kernel-exploits

linux-kernel-exploits Introduction linux-kernel-exploits Vulnerability List CVE Description Kernels CVE–2018–18955 mapwrite in kernel/usernamespace.c allows privilege escalation Linux kernel 4.15.x through 4.19.x before 4.19.2 CVE–2018–1000001 glibc glibc 2.6.22 released in 2007 CVE-2016-2384 a...

CVE-2023-36874_BOF

CVE-2023-36874 Windows Error Reporting LPE BOF Introduction This is a mature and operational CobaltStrike BOF implementation of Filip Dragovic's @filipdragovic CVE-2023-36874 Windows Error Reporting LPE exploit. He did the heavy lifting in terms of creating a working exploit by reversing the...