287590 matches found
CoercedPotatoRDLL
Coerced Potato Reflective DLL ๅฉ็จ SeImpersonateToken ๆ้ๅ MS-RPRN ๅฝๆฐ๏ผๅฐๆ้ไป NT ๆๅกๆๅ่ณ SYSTEMใ ไธป่ฆๅบไบ https://github.com/Prepouce/CoercedPotato ๅๅฐๅ ่ฝฝๅจๆฅ่ช https://github.com/stephenfewer/ReflectiveDLLInjectionใ ๅฎ่ฃ ๅ ้ๆญคไปๅบๅนถๅจ VisualStudio ไธญ็ผ่ฏ้กน็ฎ๏ผ็ถๅๅฐ dist/coercedpotato.cna ๅ ่ฝฝๅฐ CobaltStrikeใ ไฝฟ็จ ้ฆๅ ้่ฆไฝฟ็จไปฅไธๅฝไปค็ๆ RPC ็ๅฌ...
cve-2025-62215-exploit-poc
CVE-2025-62215 ๆฆๅฟต้ช่ฏ โ ๏ธ ่ญฆๅ - ๆณๅพไธ้ๅพทๅฃฐๆ ๆญคไปฃ็ ไป ไพๆ่ฒๅๅฎๅ จ็ ็ฉถไน็จใ ่ฏทๅฟ ๅจๆชๆฅๆๆๆช่ทๆ็กฎไนฆ้ข่ฎธๅฏ็็ณป็ปไธไฝฟ็จๆญคไปฃ็ ่ฏทๅฟ ๅฐๆญคไปฃ็ ็จไบๆถๆ็ฎ็ ๅจๅคงๅคๆฐๅธๆณ็ฎก่พๅบ๏ผๆช็ปๆๆ่ฎฟ้ฎ่ฎก็ฎๆบ็ณป็ปๅฑ่ฟๆณ่กไธบ ไฝ่ ไธ่ดก็ฎ่ ไธๅฏนไปปไฝๆปฅ็จๆญคไปฃ็ ็่กไธบ่ด่ดฃ ไฝฟ็จ้ฃ้ฉ่ช่ด - ๆญคไปฃ็ ๅฏ่ฝๅฏผ่ด็ณป็ปไธ็จณๅฎๆๅดฉๆบ ๆผๆดๆฆ่ฟฐ CVE-2025-62215 ๆฏไธไธช Windows ๅ ๆ ธๆ้ๆๅๆผๆด๏ผ ็ฑปๅ : ๆ้ๆๅ๏ผEoP๏ผ CVSS ่ฏๅ : 7.0๏ผ้ซๅฑ๏ผ ๆ นๆฌๅๅ : ๅ ๆ ธ่ตๆบๅๆญฅไธญ็็ซๆๆกไปถ๏ผCWE-362๏ผ ๅ้้ๆพๅ ๅญ็ ดๅ๏ผCWE-415๏ผ ๅฝฑๅ :...
CVE-2026-74925
The MultiVendorX WordPress plugin before 5.0.16 does not restrict who can update its role and capability settings, allowing users holding its vendor role to grant that role administrator-level capabilities and take over the site...
ExploitGSM
ExploitGSM Exploit para kernels 6.4 - 6.5 y otro exploit para 5.15 - 6.5 Telegram de contacto - https://t.me/YuriiCrimson Telegram chat - https://t.me/itcrowdua En invierno encontrรฉ dos vulnerabilidades en el controlador ngsm. Despuรฉs me escribiรณ Jammes con la propuesta de comprรกrmelas. Como...
golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing
A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname for example, xn--example-.com returns example.com instead of an error. Applications that validate the ASCII form then convert to Unicode may grant acce...
Important: Red Hat Security Advisory: osbuild-composer security update
An update for osbuild-composer is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
CVE-2026-0092
CVE-2026-0092 ๅจๅ ็ฎก็ๅจไธญ๏ผ็ฑไบ็ผบๅฐๆ้ๆฃๆฅ๏ผๅฏ่ฝๅญๅจ่ฎพๅค้ๆงๅถๅจ็ป่ฟ็้ฎ้ขใ่ฟๅฏ่ฝๅฏผ่ดๆฌๅฐๆ้ๆๅ๏ผไธๆ ้้ขๅค็ๆง่กๆ้ใๅฉ็จ่ฏฅๆผๆดๆ ้็จๆทไบคไบใ NVD - CVE-2026-0092 Android ๅฎๅ จๅ ฌๅ - Android 17...
GodPotato-Aggressor-Script
GodPotato-Aggressor-Script GodPotato ็ฑ BeichenDream ็ผๅ๏ผๅฏๅจ https://github.com/BeichenDream/GodPotato ๆพๅฐใ...
EchoDrv
EchoDrv Herramienta que permite explotar la vulnerabilidad de lectura/escritura del kernel en el driver anti-cheat ECHOAC echodriver.sys Uso Ejemplo Patrocinadores Trabajo en POST Luxembourg y les agradezco que me hayan dedicado tiempo para desarrollar y mantener este proyecto. Visite el sitio we...
MakeMeEnterpriseAdmin
ๆๅๆง่ก็คบไพ๏ผ root@kitploit: ====================================================================== /\ ๅฐๅ็ฎก็ๅๆๅไธบไผไธ็ฎก็ๅ - ็ๆฌ 1.0 || /||\ ่ฆๆฑ๏ผๅ็ฎก็ๅๆ้ |:||:| ๆๆดๅ ทไฝๅฐ่ฏด๏ผDS-Replication-Get-Changes-All |/||| Vincent LE TOUX [email protected] =====================================================================...
LinuxEelvation
่ฟๆฏไปไน ่ฏฅ้กน็ฎไธป่ฆ็จไบๆถ้ Linux ๅนณๅฐๆๆ็ exp๏ผๆจๅจๅธฎๅฉๆธ้ๆต่ฏไบบๅๅจๅฎๆไธญๅฟซ้ๅฎ็ฐๆ้ๆๅ ไฟกๆฏ CVE ็ผๅท| ๆ่ฟฐ| ๅ ๆ ธ ---|---|--- CVE-2004-0077| Linuxๅ ๆ ธ| 2.4.20, 2.2.24, 2.4.25, 2.4.26, 2.4.27 CVE-2004-1235| Linuxๅ ๆ ธ| 2.4.29 CVE-2005-0736| Linuxๅ ๆ ธ| 2.6.5, 2.6.7, 2.6.8, 2.6.9, 2.6.10, 2.6.11 CVE-2005-1263| Linuxๅ ๆ ธ| 2.x.x ่ณ 2.2.27-rc2ใ2.4.x ่ณ...
MAL-015
MAL-015๏ผAnsible Tower ไธญ็้็ฆป้้ธ 2 ๅจ็นๅฎ Rhel 7/8 ้ ็ฝฎไธ็ Ansible Tower ๅฎ่ฃ ๅฏ่ฝๅฎนๆๅๅฐโไฝไธ้็ฆปโ้้ธ็ๅฝฑๅ๏ผ่ฏฅ้้ธๅ ่ฎธๆปๅป่ ไป้็ฆป็ฏๅขๅค้จๆๅๅฐโawxโ็จๆทใ ๅจ CVE-2021-20253 ่ขซไฟฎๅคๅ๏ผๆปๅป่ ๅฏไปฅๅฉ็จไปฅไธๆไปถ/้ ็ฝฎๆฅๆง่กไฝไธ้็ฆป้้ธๆผๆด๏ผ ๆไปถโ/var/spool/mail/awxโ๏ผ ๅฆๆ็ฎๆ ไธๅฎ่ฃ ไบ SMTP ๆๅกๅจ๏ผๆปๅป่ ๅฏไปฅๅๅปบ่ฏฅๆไปถ ไนๅฏ่ฝ็ฑโuseraddโ็ญ็จๅบๅๅปบ๏ผๅฆๆไฝฟ็จ่ชๅฎไน็ awx ็จๆท๏ผ ๅจ Rhel 7 ๆๆดไฝ็ๆฌไธญ๏ผไธบไบๅฎ่ฃ AWX๏ผ้่ฆๅฎ่ฃ ่ฟ่กๆถ็ๆฌ็...
POC-CVE-2026-56164-exploit
CVE-2026-56164 โ Microsoft SharePoint Server ่บซไปฝ้ช่ฏ็ป่ฟๆผๆดๅฉ็จๅทฅๅ ท ไธฅ้๏ผCVSS 9.8๏ผ โ ๅจ Microsoft SharePoint Server ไธญ๏ผๆช็ป่บซไปฝ้ช่ฏๅณๅฏๅฐๆ้ๆๅ่ณๅบ็ฎก็ๅ ็ฎๅฝ ๆฆ่ฟฐ ๆผๆด่ฏฆๆ ๅๅฝฑๅ็ๆฌ ๆถๆๅพ ้กน็ฎ็ปๆ ๅฎ่ฃ ๆซๆๅจไฝฟ็จ โ ๅๆญฅๆๅ ๆผๆดๅฉ็จๅทฅๅ ทไฝฟ็จ โ ๅๆญฅๆๅ ่ฝฝ่ท่ฎพ่ฎก ็ผ่งฃๆชๆฝ ๅ ่ดฃๅฃฐๆ ๆฆ่ฟฐ CVE-2026-56164 ๆฏ Microsoft SharePoint Server ไธญ็ไธไธชไธฅ้็ผบๅคฑ่บซไปฝ้ช่ฏๆผๆด๏ผๅ ่ฎธๆช็ป่ฟ่บซไปฝ้ช่ฏ็่ฟ็จๆปๅป่ ๅฐๆ้ๆๅ่ณๅบ็ฎก็ๅ ็บงๅซใ่ฏฅๆผๆดไฝไบ...
CVE-2023-36003-POC
Escalada de privilegios mediante la API de diagnรณstico XAML CVE-2023-36003 Este es un POC prueba de concepto de una vulnerabilidad de escalada de privilegios que utiliza la API de diagnรณstico XAML. La vulnerabilidad fue parcheada en el Patch Tuesday de diciembre, y el CVE asignado es...
msi-search
MSI ๆ็ดข Windows ๅจ C:\Windows\Installer\ ไธญไปฅ้ๆบๆไปถๅ๏ผ็ฑๅญๆฏๅๆฐๅญ็ปๆ๏ผๅ่ท ".msi" ๆฉๅฑๅ๏ผ็ผๅญ MSI ๆไปถใ่ฏฅๅทฅๅ ท็ฎๅไบ็บข้ๆไฝๅๅๅฎๅ จๅข้่ฏๅซๅชไบ MSI ๆไปถๅฏนๅบๅชไบ่ฝฏไปถ็ไปปๅก๏ผๅนถไฝฟไปไปฌ่ฝๅคไธ่ฝฝ็ธๅ ณๆไปถ๏ผไปฅ้่ฟ MSI ไฟฎๅค่ฐๆฅๆฌๅฐๆ้ๆๅๆผๆดใๆดๅคๅ ณไบ MSI ไฟฎๅคๆผๆด็ไฟกๆฏ๏ผ่ฏทๅ้ ้่ฟ็ฌฌไธๆน Windows ๅฎ่ฃ ็จๅบๆๅๆ้ใ ไฝ่ ๏ผAndrew Oliveau @AndrewOliveau ็ผ่ฏ root@kitploit: x8664-w64-mingw32-gcc -c msisearch.c -o...
TokenStealer
TokenStealer ไธไธชๆๅ้ตๅญ็ผๅ็็จไบ็ชๅๅๆไฝ Windows ไปค็็็ฎๅๅทฅๅ ทใ ้จๅไปฃ็ ๅ่ชๅนถๆน็ผ่ช https://github.com/FSecureLABS/incognito ๆพ็ถ๏ผไฝ ้่ฆ Impersonation ๆ AssignPrimary ็นๆไปฅๅ Debug ็นๆๆ่ฝ่ฎฟ้ฎๆๆ่ฟ็จใ ้ๅธธๆ ๅตไธ๏ผไฝ ๅบ่ฏฅไปฅๆ้ซๆฌๅฐๆ้๏ผๅฆ SYSTEM๏ผ่ฟ่กๆญคๅทฅๅ ทใ root@kitploit: TokenStealer.exe + My personal simple and stupid Token Stealer... ; + v1.0 @decoderit 2023...
RemoteDLLInjector
ไป็ป ่ฟๆฏไธไธชๅฏ็จไบ DLL ๆณจๅ ฅ็ๅทฅๅ ท๏ผ ไป RemoteDLLInjector ๆง่ก็้ฃไธๅป่ตท๏ผๅฎๅฐๆไพไธบๅฎ็ฐ DLL ๆณจๅ ฅๆๆง่ก็ๅฎๆดๆญฅ้ชคใ ๅฆๆ DLL ๆๅๆณจๅ ฅ๏ผๅฎๅฐ่ฟๅไธไธชๅ ทๆ่ฏฅ่ฟ็จๆ้็ meterpreter ไผ่ฏใๅ ๆญค๏ผๆ้้ซไบๆ ๅ่ฟ็จ็่ฟ็จๅฏ่ฝ่ขซๆปฅ็จ๏ผไปฅๅฎ็ฐๆ้ๆๅใ...
Monitor
้กน็ฎ่ฏดๆ ็จไบๅฎ็ฐๅๆธ้ๆต่ฏ้ถๆฎตๆ้็ปดๆ ้กน็ฎไฝฟ็จ Step1 ๏ผไธ่ฝฝ่ฏฅ้กน็ฎ๏ผไนๅไฝฟ็จVS็ผ่ฏMonitor.cpp๏ผๅฝ็ถไนๅฏไปฅไฝฟ็จ็ผ่ฏๅฅฝ็๏ผMonitor.cppไปฃ็ ๅฆไธๆ็คบ๏ผ root@kitploit: include "Windows.h" int main MONITORINFO2 monitorInfo; TCHAR env12 = TEXT"Windows x64"; TCHAR name12 = TEXT"Monitor"; TCHAR dll12 = TEXT"test.dll"; monitorInfo.pName = name;...
CVE-2023-6654
CVE-2023-6654 PHPEMS Cookie ใใทใชใขใฉใคใผใผใทใงใณ่ๅผฑๆงใใใฎ่ๅผฑๆงใๅฉ็จใใฆใใใทใชใขใฉใคใผใผใทใงใณใซใใSQLๆใๆนๅคใใSQLใคใณใธใงใฏใทใงใณใ้ใใฆๆขๅญใฆใผใถใผใฎใในใฏใผใใๆจฉ้ใไปปๆใซๅคๆดใงใใพใใใใใฉใซใใฎ็ฎก็่ ใขใซใฆใณใใฏ peadmin ใงใใ Fofa ใใฃใณใฌใผใใชใณใ app="PHPEMS" ใใผใซใฎไฝฟ็จๆนๆณ python exp.py -u http://127.0.0.1:1111 -u ใใฉใกใผใฟใงPHPEMSใฎURLใขใใฌในใๆๅฎใใพใ -a ใใฉใกใผใฟใงใฆใผใถใผๅใๆๅฎใใพใใใใใฉใซใใฏPHPEMSใฎ็ฎก็ใขใซใฆใณใ...
Ubuntu-0day
Ubuntu16.04-0day ๆผๆด่ๅด๏ผ all 4.4 ubuntu aws instances are vulnerable Jann Hornๅ็ฐๅจๆไบๆ ๅตไธ๏ผLinuxๅ ๆ ธไธญ็Berkeley Packet Filter๏ผBPF๏ผไธๆญฃ็กฎๅฐๆง่กไบ็ฌฆๅทๆฉๅฑcheckaluopใๆฌๅฐๆปๅป่ ๅฏไปฅไฝฟ็จๅฎๅจ็ณป็ปไธ่ฟ่กๆๆ,่ทๅrootๆ้ใ root@kitploit: bpf: fix incorrect sign extension in checkaluop Distinguish between BPFALU64|BPFMOV|BPFK load 32-bit immediate...