ATP-PowerShell-Scripts

ATP-PowerShell-Scripts Microsoft Signed PowerShell scripts List of all the signed scripts available in C:\ProgramData\Microsoft\Windows Defender Advanced Threat Protection\DataCollection Accessing the file By default the files cannot be accessed. You need the TrustedInstaller privilege...

persistence-info.github.io

The repository tries to gather an information about Windows persistence mechanisms to make the protection/detection more efficient. Most of the information is well known for years, being actively used within various scenarios. Expect more. I am doing my best to add new entries each day. How it...

BOF_Collection

BOFCollection Various Cobalt Strike BOFs Requirements beacon.h For compilation instructions and BOF overview help-bof ActiveDirectory GetDomainInfo.c Returns information on the current domain and domain controller. inline-execute GetDomainInfo.o Collection GetClipboard.c Prints any text on the...

MoreImpacketExamples

MoreImpacketExamples This repository contains a few short python scripts that were created using the Impacket library. The primary goal of this project is to help myself and others who are looking to transition from using the provided impacket examples to modifying/creating scripts of their own...

VMwareCloak

VMwareCloak Un script de PowerShell que intenta ayudar a los analistas de malware a ocultar sus máquinas virtuales VMware de Windows del malware que pueda estar intentando evadir el análisis. Garantizado para bajar tus puntuaciones en pafish por al menos algunos puntos ; El script logra esto...

CVE-2026-89332

Inclusion of functionality from an untrusted control sphere in the Kiro Powers feature in Amazon Kiro IDE before version 0.8.135 might allow remote unauthenticated actors to obtain sensitive information from a developer workstation. Crafted repository content can cause the agent to modify the...

slui-file-handler-hijack-privilege-escalation

Slui File Handler Hijack LPE Exploit Information| ---|--- Date| 15.01.2018 Patched| Windows 10 20H1 19041 exploit-db| 44830 Tested on| Windows 8-10, x86/x64 independent Description slui.exe is an auto-elevated binary that is vulnerable to file handler hijacking. Read access to...

CVE-2026-19195-PoC

CVE-2026-19195 - Proof of Concept Arbitrary Registry Key Modifications via Unauthenticated IOCTL requests in Jingyun Antivirus Kernel Driver ZyArk.sys Affected Asset Product: Jingyun Antivirus Version: 2.4.2.39 Component: ZyArk.sys SHA-256 Hash:...

MsSettingsDelegateExecute

MsSettingsDelegateExecute Evita UAC en Windows 10/11 x64 usando la clave de registro DelegateExecute de ms-settings. Este proyecto de Visual Studio compilará un binario x64 estático para probar este problema. Licencia Estos archivos están disponibles bajo la licencia BSD de 3 cláusulas...

windows_hardening

HardeningKitty y el endurecimiento de Windows Introducción El proyecto comenzó como una simple lista de endurecimiento para Windows 10. Después de un tiempo, se creó HardeningKitty para simplificar el endurecimiento de Windows. Ahora, HardeningKitty admite las guías de Microsoft, CIS Benchmarks,...

windows_hardening

HardeningKitty and Windows Hardening Introduction The project started as a simple hardening list for Windows 10. After some time, HardeningKitty was created to simplify the hardening of Windows. Now, HardeningKitty supports guidelines from Microsoft, CIS Benchmarks, DoD STIG and BSI SiSyPHuS Win1...

CVE-2026-21005-Docker-Registry-V2-Schema-1-Image-Poisoning

CVE-2026-21005 – Docker Registry V2 Schema 1 Image Poisoning Program Code Python Flask + Shell root@kitploit: dockerregistrysim.py - Simulated registry that serves schema1 manifests from flask import Flask, request, jsonify app = Flaskname images = 'myapp': 'v1': 'layers': 'sha256:abc',...

RDPLinkEnum

RDPLinkEnum By querying the registry, you can view which hosts the current host has connected to and the user name information used when connecting Perform demo...

MAL-007

MAL-007: XML External Entity via Local Registry Entries in WSO2 ESB An inline XML External Entity XXE attack was identified in the WSO2 ESB “Local Entities” tool. Why no CVE? The vendor replied that this vulnerability was "Fixed in WUM" and no public disclosure was made. Requirements: This...

wmiexec-RegOut

⛔ OBSOLETO Activo en https://github.com/XiaoliChan/wmiexec-Pro wmiexec-RegOut Versión modificada de impacket wmiexec.py, wmipersist.py. Obtiene la salida datos, respuesta del registro, no necesita conexión SMB, pero estoy en el mal código : Tabla de contenido Resumen Requisitos Uso Trucos...

Perfusion

Perfusion En Windows 7 , Windows Server 2008R2 , Windows 8 y Windows Server 2012 , la clave de registro de los servicios RpcEptMapper y DnsCache solo en 7/2008R2 está configurada con permisos débiles. Cualquier usuario local puede crear una subclave Performance y luego aprovechar los Contadores d...

kit

kit Gestor de registros de herramientas -- gestiona cadenas de herramientas de desarrolladores desde registros basados en git, sobre mise. Qué es kit resuelve versiones de herramientas a través de múltiples registros, genera configuración de mise, verifica sumas de comprobación SHA-256 contra...

VirtualLockSensorLPE

VirtualLockSensorLPE Descripción Exploit PoC de escalada de privilegios local para CVE-2025-0886 que apunta a Elliptic Virtual Lock Sensor versión 3.1.60531.2 ejecutándose en Windows, instalado por defecto en ciertos modelos de laptop Lenovo. Permite ejecutar una carga útil en el contexto de SYST...

ms-msdt-vulnerability-pdq-package

ms-msdt-vulnerability-pdq-package Necesitarás todos los archivos para que el paquete funcione correctamente "de fábrica". Si no tienes PDQ Inventory, elimina el paso de escaneo del paquete antes de ejecutarlo. Este paquete ahora busca la clave de registro search-ms además de la clave ms-msdt...

CVE-2020-1350_HoneyPoC

This is an educational exercise. Use at your own risk. CVE-2020-1350 Exploit aka SIGRED This is a lesson as to why you should not trust binaries on the internet., the workaround fix is genuine. Workaround Fix root@kitploit: reg add "HKEYLOCALMACHINE\SYSTEM\CurrentControlSet\Services\DNS\Parameter...