byeintegrity-uac

ByeIntegrity — Windows UAC Bypass Bypass User Account Control UAC to gain elevated Administrator privileges to run any program at a high integrity level. Requirements Administrator account UAC notification level set to default or lower 2021 Update I have decided to update ByeIntegrity so that it'...

COMahawk

COMahawk Privilege Escalation: Weaponizing CVE-2019-1405 and CVE-2019-1322 Video Demo https://vimeo.com/373051209 Usage Compile or Download from Release https://github.com/apt69/COMahawk/releases 1. Run COMahawk.exe 2. ??? 3. Hopefully profit or 1. COMahawk.exe "custom command to run" ie...

CVE-2021-3493

CVE-2021-3493 Ubuntu OverlayFS Local Privesc Affected Versions Ubuntu 20.10 Ubuntu 20.04 LTS Ubuntu 19.04 Ubuntu 18.04 LTS Ubuntu 16.04 LTS Ubuntu 14.04 ESM Usage gcc exploit.c -o exploit ./exploit Description "Ubuntu specific issue in the overlayfs file system in the Linux kernel where it did no...

Pixel_GPU_Exploit

Mali GPU Kernel LPE This article provides an in-depth analysis of two kernel vulnerabilities within the Mali GPU, reachable from the default application sandbox, which I independently identified and reported to Google. It includes a kernel exploit that achieves arbitrary kernel r/w capabilities...

RottenPotato

This code is no longer maintained - for a newer implementation see https://github.com/breenmachine/RottenPotatoNG RottenPotato Local Privilege Escalation from Windows Service Accounts to SYSTEM For a technical overview of this exploit see our blog post at...

PSPKIAudit

PSPKIAudit PowerShell toolkit for auditing Active Directory Certificate Services AD CS. It is built on top of PKISolution's PSPKI toolkit Microsoft Public License. This repo contains a newer version of PSPKI than what's available in the PSGallery see the PSPKI directory. Vadims Podans the creator...

RemoteKrbRelay

root@kitploit: //, ,//\ \ / \ \ XXX XXX / //, \o-o/-o-o/ / / \ XXX | / \ / ,-/ / \ / /,| | \ | / \ / ,-,,,/ ,,, CICADA8 Research Team From Michael Zhmaylo MzHmO RemoteKrbRelay You probably know KrbRelay and KrbRelayUp, but what if I told you it could be done remotely? With RemoteKrbRelay...

windows-kernel-exploits

windows-kernel-exploits Introduction windows-kernel-exploits Vulnerability List Security Bulletin KB Description Operating System CVE-2021-33739 Microsoft DWM Core Library Elevation of Privilege Vulnerability Windows 10, 20 CVE-2021-1732 Windows Win32k Elevation of Privilege Vulnerability Windows...

CVE-2020-1472

CVE-2020-1472 POC Requires the latest impacket from GitHub with added netlogon structures. Do note that by default this changes the password of the domain controller account. Yes this allows you to DCSync, but it also breaks communication with other domain controllers, so be careful with this! Mo...

SpoolFool

SpoolFool Exploit for CVE-2022-21999 - Windows Print Spooler Elevation of Privilege Vulnerability LPE Details The provided exploit should work by default on all Windows desktop versions. Please see the blog post for full technical details here. Usage root@kitploit: PS C:\SpoolFool .\SpoolFool.exe...

CVE-2026-58567

Dell PowerStore contains an OS Command Injection vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to execute arbitrary commands with root privileges...

WordPress Booking for Appointments and Events Calendar - Amelia (Premium) plugin 8.0 - 9.6.2 - Unauthenticated Privilege Escalation to Administrator via 'externalId' vulnerability

WordPress Booking for Appointments and Events Calendar - Amelia Premium plugin 8.0 - 9.6.2 - Unauthenticated Privilege Escalation to Administrator via 'externalId' vulnerability discovered by d.v4ns3c in WordPress Plugin Amelia versions 8.0-9.6.2...

StrandHogg2

StrandHogg2 Poc for StrandHogg2 CVE-2020-0096 Information of the original vulnerability Current Description In startActivities of ActivityStartController.java, there is a possible escalation of privilege due to a confused deputy. This could lead to local escalation of privilege with no additional...

CVE-2021-3899_PoC

CVE-2021-3899 PoC Reproduce 0. Install an older version of apport: sudo apt-get install apport=2.20.11-0ubuntu27 any version apportstart: 597 errorlog'process was replaced after Apport started, ignoring' 598 sys.exit0 But this pid could be re-used just after apport launched. In such case,...

CVE-2017-16995

The latest version of Ubuntu Ubuntu 16.04 has a high-risk local privilege escalation vulnerability, numbered CVE-2017-16995. This vulnerability exists in the Linux kernel system that calls eBPF bpf2. When a user provides a malicious BPF program, the eBPF verifier module generates a calculation...

CVE-2026-58566

CVE-2026-58566 is an Incorrect Authorization vulnerability in Dell PowerStore . A low-privileged attacker with remote network access could exploit it to achieve elevation of privileges , with a CVSS 3.1 base score of 8.8 (HIGH) — indicating high impact to confidentiality, integrity, and availabil...

-2021-LOCALROOT-CVE-2021-22555

This repository does not have a README...

-2022-LOCALROOT-CVE-2022-2639

This repository does not have a README...

SUDO-privilege-escalation

SUDO Privilege Escalation Overview: This project demonstrates the exploitation of the Sudo privilege escalation vulnerability CVE-2023-22809. The objective is to simulate how an attacker can gain unauthorized root access by exploiting this vulnerability in a controlled environment. Technologies...

CVE-2025-49173

CVE-2025-49173 — macOS 10.9 Local Root Privilege Escalation Research Status: Unofficial / Research-Based Platform: macOS Mavericks 10.9 Impact: Local Privilege Escalation → Root Severity: High Local This repository contains a proof-of-concept PoC security research project focused on a local root...