SharpEfsPotato

SharpEfsPotato SeImpersonatePrivilege を使用した EfsRpc によるローカル権限昇格。 @EthicalChaos 氏の SweetPotato と @cube0x0 氏の SharpSystemTriggers/SharpEfsTrigger を基に構築されています。 使用方法 root@kitploit: C:\tempSharpEfsPotato.exe -h SharpEfsPotato by @bugch3ck Local privilege escalation from SeImpersonatePrivilege using...

DCOMPotato

一部のサービスDCOMオブジェクトのローカル特権昇格脆弱性のためのエクスプロイト集（SeImpersonatePrivilege の悪用による） 解説 DCOMはデフォルトの偽装レベルとして RPCCIMPLEVELIDENTIFY を使用します。既定のアウトバウンド IUnknown 呼び出しについては https://learn.microsoft.com/en-us/windows/win32/com/com-security-defaults を参照してください。もちろん、COMサーバーは CoInitializeSecurity を明示的に呼び出すことでオーバーライドできます。...

PrintSpoofer

PrintSpoofer From LOCAL/NETWORK SERVICE to SYSTEM by abusing SeImpersonatePrivilege on Windows 10 and Server 2016/2019. For more information: https://itm4n.github.io/printspoofer-abusing-impersonate-privileges/. Usage You can check the help message using the -h option. root@kitploit:...

CrystalPotato

CrystalPotato GodPotato の Crystal 移植版。SeImpersonatePrivilege を持つアカウントから SYSTEM へのローカル権限昇格を実現します。DCOM OXID Resolver と名前付きパイプの偽装を悪用して動作します。 Windows API は動的に解決され、間接システムコールスタブを介して呼び出されます。すべての文字列はコンパイル時に XOR で難読化され、デフォルトではコマンドの出力のみが表示されます。Windows 10、11、Server 2025 でテスト済みです。 ビルド CrystalPotato は Windows...

CouchPotato

CouchPotato 検出を避けるため、必ず自分でコンパイルしてください。特定の文字列はコンパイル時にXORされます。これ以上のバイナリは公開しません。 使用方法: CouchPotato.exe ip port ETWとAMSIにパッチを適用し、間接システムコールを使用してSeImpersonatePrivilegeを悪用します。 サービスアカウント || 管理者 - NTシステム...

The vulnerability of the Cross Device Service for Windows operating systems allows attackers to enhance their privileges.

The vulnerability of the Cross Device Service for Windows operating systems is related to deficiencies in access control when processing the enabled parameter of the SeImpersonatePrivilege service token, as a result of loading the malicious CrossDeviceStreaming.Source.dll library. Exploiting this...

Exploit for CVE-2026-66804

CVE-2026-66804: Cross Device Virtual Camera EoP A standard Wi...

PT-2026-70703

Name of the Vulnerable Software and Affected Versions Windows 11 affected versions not specified Description Improper access control in the Windows Cross Device Service allows an authorized attacker to elevate privileges locally. The issue occurs because a standard user can create the...

EUVD-2020-5987

Malware in sbrugna...

EUVD-2025-9126

Malicious code in bioql PyPI...

The vulnerability of the Interactive Service (iservice) of the OpenVPN GUI software allows a malicious individual to gain unauthorized access to the user’s account.

The vulnerability of the Interactive Service iservice of the OpenVPN GUI software relates to deficiencies in access control when processing the SeImpersonatePrivilege parameter. Exploiting this vulnerability can allow an attacker to gain unauthorized access to the user account...

CVE-2025-0416

Local privilege escalation through insecure DCOM configuration in Valmet DNA versions prior to C2023. The DCOM object Valmet DNA Engineering has permissions that allow it to run commands as a user with the SeImpersonatePrivilege privilege. The SeImpersonatePrivilege privilege is a Windows...

CVE-2025-0416

Local privilege escalation through insecure DCOM configuration in Valmet DNA versions prior to C2023. The DCOM object Valmet DNA Engineering has permissions that allow it to run commands as a user with the SeImpersonatePrivilege privilege. The SeImpersonatePrivilege privilege is a Windows...

CVE-2025-0416 Valmet DNA Local privilege escalation through insecure DCOM configuration

Local privilege escalation through insecure DCOM configuration in Valmet DNA versions prior to C2023. The DCOM object Valmet DNA Engineering has permissions that allow it to run commands as a user with the SeImpersonatePrivilege privilege. The SeImpersonatePrivilege privilege is a Windows...

CVE-2025-0416 Valmet DNA Local privilege escalation through insecure DCOM configuration

Local privilege escalation through insecure DCOM configuration in Valmet DNA versions prior to C2023. The DCOM object Valmet DNA Engineering has permissions that allow it to run commands as a user with the SeImpersonatePrivilege privilege. The SeImpersonatePrivilege privilege is a Windows...

CVE-2025-0416: Execution with Unnecessary Privileges

Local privilege escalation through insecure DCOM configuration in Valmet DNA versions prior to C2023. The DCOM object Valmet DNA Engineering has permissions that allow it to run commands as a user with the SeImpersonatePrivilege privilege. The SeImpersonatePrivilege privilege is a Windows...

CVE-2021-3576 Privilege escalation via SeImpersonatePrivilege

Execution with Unnecessary Privileges vulnerability in Bitdefender Endpoint Security Tools, Total Security allows a local attacker to elevate to 'NT AUTHORITY\System. Impersonation enables the server thread to perform actions on behalf of the client but within the limits of the client's security...

Exploit for Exposed IOCTL with Insufficient Access Control in Dell Dbutil

CVE-2021-21551 Exploit to SYSTEM for CVE-2021-21551 SpoolPrin...

Microsoft Windows Containers Privilege Escalation

Windows Containers: ContainerUser has Elevated Privileges Windows Containers: ContainerUser has Elevated Privileges Platform: Windows 10 20H2 not tested other versions Class: Elevation of Privilege Security Boundary: User Summary: The standard user ContainerUser in a Windows Container has elevate...

Microsoft Windows Containers Privilege Escalation Vulnerability

The standard user ContainerUser in a Windows Container has elevated privileges and High integrity level which results in making it administrator equivalent even though it should be a restricted user. Windows Containers: ContainerUser has Elevated Privileges Windows Containers: ContainerUser has...