Microsoft Windows EternalBlue SMB Remote Code Execution

A remote code execution vulnerability exists in Microsoft Server Message Block SMB. The vulnerability is due to the way SMB service handles certain requests. The Fuzzbunch tool allows attackers to execute this exploit. An attacker who successfully exploits this vulnerability can execute arbitrary...

Microsoft Windows 2003 SP2 ERRATICGOPHER SMB Remote Code Execution

!/usr/bin/env python -- coding: utf-8 -- By Victor Portal vportal for educational porpouse only This exploit is the python version of the ErraticGopher exploit probably with some modifications. ErraticGopher exploits a memory corruption seems to be a Heap Overflow in the Windows DCE-RPC Call...

Microsoft Windows (x86) - 'NDISTAPI' Privilege Escalation (MS11-062)

No description provided by source. / Exploit Title: Windows x86 all versions NDISTAPI privilege escalation MS11-062 Date: 2016-10-24 Exploit Author: Tomislav Paskalev Vulnerable Software: Windows XP SP3 x86 Windows XP Pro SP2 x64 Windows Server 2003 SP2 x86 Windows Server 2003 SP2 x64 Windows...

Microsoft Windows 10 (Build 10586) - 'IEETWCollector' Arbitrary Directory/File Deletion Privilege Escalation

/ Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1093 Windows: IEETWCollector Arbitrary Directory/File Deletion EoP Platform: Windows 10 10586 not tested on anything else Class: Elevation of Privilege Summary: When cleaning up an ETW session the IEETWCollector service deletes i...

Microsoft Windows 10 - Runtime Broker ClipboardBroker Privilege Escalation

Microsoft Windows 10 - Runtime Broker ClipboardBroker Privilege Escalation Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1079 Windows: Runtime Broker ClipboardBroker EoP Platform: Windows 10 10586/14393 not tested 8.1 Update 2 Class: Elevation of Privilege Summary: The Runtime...

Microsoft Windows IFEO Winlogin SYSTEM Backdooring Exploit

@ECHO OFF REM Microsoft Windows 'IFEO' Winlogin SYSTEM Backdooring Exploit REM REM Todor Donev REM https://www.ethical-hacker.org/ REM https://www.facebook.com/ethicalhackerorg REM REM https://blogs.msdn.microsoft.com/mithuns/2010/03/24/image-file-execution-options-ifeo/ REM REM Disclaimer: REM...

Microsoft Windows taskschd.msc Privilege Escalation Vulnerability

Microsoft Windows taskschd.msc local SYSTEM privilege escalation exploit. Microsoft Windows 'taskschd.msc' Local SYSTEM Privilege Escalation Todor Donev https://www.ethical-hacker.org/ https://www.facebook.com/ethicalhackerorg Disclaimer: This or previous programs is for Educational purpose ONLY...

Microsoft Windows taskschd.msc Privilege Escalation

Microsoft Windows 'taskschd.msc' Local SYSTEM Privilege Escalation Todor Donev https://www.ethical-hacker.org/ https://www.facebook.com/ethicalhackerorg Disclaimer: This or previous programs is for Educational purpose ONLY. Do not use it without permission. The usual disclaimer applies, especiall...

Microsoft Windows - SMB Remote Code Execution Scanner (MS17-010) (Metasploit)

Microsoft Windows - SMB Remote Code Execution Scanner MS17-010 Metasploit This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework auxiliary/scanner/smb/smbms17010 require 'msf/core' class MetasploitModule 'MS17-010 SMB RCE...

Microsoft Windows - SMB Remote Code Execution Scanner (MS17-010) (Metasploit)

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework auxiliary/scanner/smb/smbms17010 require 'msf/core' class MetasploitModule 'MS17-010 SMB RCE Detection', 'Description' = %q Uses information disclosure to determine if...

The Shadow Brokers Release Zero Day Exploit Tools

On Friday, a hacker group known as The Shadow Brokers publicly released a large number of functional exploit tools. Several of these tools make use of zero-day vulnerabilities, most of which are in Microsoft Windows. Exploiting these vulnerabilities in many cases leads to remote code execution an...

Microsoft Windows ATMFD.dll Information Disclosure Vulnerability

Microsoft Windows is the popular computer operating system. An information disclosure vulnerability exists in Microsoft Windows ATMFD.dll, which can be exploited by attackers to obtain sensitive information...

Microsoft Windows Hyper-V Remote Denial of Service Vulnerability (CNVD-2017-05719)

Microsoft Windows is the popular computer operating system. A remote denial of service vulnerability exists in Microsoft Windows Hyper-V, which can be exploited by an attacker to cause the host computer to crash...

Microsoft Windows Hyper-V Remote Denial of Service Vulnerability (CNVD-2017-05721)

Microsoft Windows is the popular computer operating system. A remote denial of service vulnerability exists in Microsoft Windows Hyper-V, which can be exploited by an attacker to cause the host computer to crash...

Microsoft Windows Denial of Service Vulnerability (CNVD-2017-05724)

Microsoft Windows is the popular computer operating system. Microsoft Windows does not properly handle memory objects and is implemented with a denial-of-service vulnerability that can be exploited by an attacker to cause the target system to stop responding...

Microsoft Windows Hyper-V Remote Denial of Service Vulnerability (CNVD-2017-05720)

Microsoft Windows is the popular computer operating system. A remote denial of service vulnerability exists in Microsoft Windows Hyper-V, which can be exploited by an attacker to cause the host computer to crash...

Microsoft Windows OLE Elevation of Privilege Vulnerability

Microsoft Windows is the popular computer operating system. Microsoft Windows suffers from an implementation elevation of privilege vulnerability that can be exploited by an attacker to execute arbitrary code in an application context...

Microsoft Windows Multiple Vulnerabilities (KB4015221)

This host is missing an important security update according to Microsoft Security update KB4015221. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Microsoft Windows Multiple Vulnerabilities (KB4015217)

This host is missing an important security update according to Microsoft Security update KB4015217. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Microsoft Windows Hyper-V Remote Denial of Service Vulnerability (CNVD-2017-05586)

Microsoft Windows is a family of operating systems from Microsoft Corporation, U.S.A. Hyper-V is one of the virtualization products. A denial of service vulnerability exists in Hyper-V in Microsoft Windows. An attacker can exploit this vulnerability to cause a denial of service host crash with th...