awesome_windows_logical_bugs

awesomewindowslogicalbugs Created this repo for the people who want to learn about windows logical privilege escalation bugs. And also I added some of my findings. You can contact me via @404death to add good article which I missed. work in progress WIP , I'm always update this repo when the new...

power-tracks-research

Power Tracks Research Comprehensive research repository for "Power Tracks," "Stock Galaxy," and "Warped Prism" market mechanics. This codebase contains the tools, pipelines, and validation suites used to uncover and map systemic anomalies in modern market microstructure. Structure The research is...

Change-Lockscreen

Change-Lockscreen Change-Lockscreen is a tool to trigger network authentications as SYSTEM by changing the Windows lock screen image from the command line to perform privilege escalation attacks such as the one described in the post linked below:...

linux-smart-enumeration

First, a couple of useful oneliners ; wget "https://github.com/diego-treitos/linux-smart-enumeration/releases/latest/download/lse.sh" -O lse.sh;chmod 700 lse.sh curl "https://github.com/diego-treitos/linux-smart-enumeration/releases/latest/download/lse.sh" -Lo lse.sh;chmod 700 lse.sh Note that...

CVE-2019-1388

CVE-2019-1388 UAC Privilege Escalation nt authority\system 0x01 Demo SERVER ====== Windows 2008r2 7601 link OPENED AS SYSTEM Windows 2012r2 9600 link OPENED AS SYSTEM Windows 2016 14393 link OPENED AS SYSTEM Windows 2019 17763 link NOT opened WORKSTATION =========== Windows 7 SP1 7601 link OPENED...

reload.sh

reload.sh Don't do it... Please don't do it on live systems e.g. production or on your private computer where you stored critical data. This recipe show you how to install fresh system where other system exist and running. It's really cool and amazing but very risky! If you want to go into the...

bpflock

bpflock - Lock Linux machines bpflock - eBPF driven security for locking and auditing Linux machines. Note: bpflock is currently in experimental stage , it may break, options and security semantics may change, some BPF programs will be updated to use Cilium ebpf library. Sections 1. Introduction...

timesketch

Timesketch Table of Contents 1. About Timesketch 2. Getting started 3. Community 4. Contributing About Timesketch Timesketch is an open-source tool for collaborative forensic timeline analysis. Using sketches you and your collaborators can easily organize your timelines and analyze them all at th...

CVE-2019-10685

CVE-2019-10685 The user supplied input containing JavaScript is echoed back in JavaScript code in an HTML response via the "TextField" parameter. Exploit-DB publication at https://www.exploit-db.com/exploits/46804 PacketStorm publication at...

fortios-auth-bypass-poc-CVE-2024-55591

CVE-2024-55591 A Fortinet FortiOS Authentication Bypass Vulnerable PoC Description Use this poc,you can bypass authentication and see system log USEAGE sysirq@sysirq-machine:/Work/Fortinet/FortiGate7016/CVE-2024-55591$ python3 poc.py usage: poc.py -h --target TARGET --port PORT poc.py: error: the...

libfsntfs

libfsntfs is a library to access the New Technology File System NTFS format. Project information: Status: experimental Licence: LGPL-3.0-or-later Read-only supported NTFS formats: NTFS version 3.0 NTFS version 3.1 Supported NTFS format features: LZNT1 compression Windows Overlay Filter WOF...

chipsec

CHIPSEC: Platform Security Assessment Framework CHIPSEC is a framework for analyzing the security of PC platforms including hardware, system firmware BIOS/UEFI, and platform components. It includes a security test suite, tools for accessing various low level interfaces, and forensic capabilities...

grapheneX

grapheneX In computing, hardening is usually the process of securing a system by reducing its surface of vulnerability, which is larger when a system performs more functions; in principle a single-function system is more secure than a multipurpose one. Reducing available ways of attack typically...

lsarelayx

lsarelayx Introduction lsarelayx is system wide NTLM relay tool designed to relay incoming NTLM based authentication to the host it is running on. lsarelayx will relay any incoming authentication request which includes SMB. Since lsarelayx hooks into existing application authentication flows, the...

OWASP-WSTG-Rag

OWASP WSTG RAG A Retrieval-Augmented Generation RAG system that indexes the OWASP Web Security Testing Guide WSTG into a vector database, providing instant access to security testing methodologies via REST API and MCP Model Context Protocol for Claude Code integration. Features Complete WSTG...

owasp-threat-dragon-desktop

OWASP Threat Dragon Threat Dragon is a free, open-source, cross-platform threat modeling application including system diagramming and a rule engine to auto-generate threats/mitigations. It is an OWASP Incubator Project. The focus of the project is on great UX, a powerful rule engine and integrati...

CVE-2023-50071

CVE-2023-50071 Customer Support System 1.0 - Multiple SQL injection vulnerabilities - savedepartment Description : Multiple SQL injection vulnerabilities in /customersupport/ajax.php?action=savedepartment in Customer Support System 1.0 allow authenticated attackers to execute arbitrary SQL comman...

sagex3-cve-2020-7388-poc

sagex3-cve-2020-7388-poc Proof of concept exploit code for CVE-2020-7388, an unauthenticated RCE as SYSTEM on Sage X3's AdxDSrv Service Overview Sage X3 exposes an administrative service on port TCP/1818 default, but changeable under the process "AdxDSrv.exe," part of the AdxAdmin component. This...

CVE-2026-11344-RCE

Vehicle Management System In PHP - Unauthenticated Remote Code Execution via File Upload in newdriver.php Vulnerability Information Field| Details ---|--- Product| Vehicle Management System In PHP Vendor| code-projects.org Version| V1.0 Vulnerability Type| Unrestricted File Upload leading to Remo...

CVE-2021-38699-Stored-XSS

CVE-2021-38699: Stored XSS in TastyIgniter v3.0.7 Restaurtant CMS Stored authenticated cross-site scripting exists in the in TastyIgniter v3.0.7 Restaurtant CMS System Logs section of the web application. https://vulners.com/cve/CVE-2021-38699 POC 1. Execute reflective cross site scripting...