github-dev-token-steal-poc

github-dev-token-steal-poc Prueba de concepto de la vulnerabilidad de https://blog.ammaraskar.com/github-token-stealing...

CVE-2016-0040

CVE-2016-0040 该利用基于SMMRootkit的32位项目（https://github.com/Rootkitsmm/cve-2016-0040），该项目通过将RCX全部设为'a'、RAX全部设为'B'来触发该漏洞，导致蓝屏死机（BSoD）。 它被移植到了64位Windows 7 SP1，并且没有使用"mov rcx+06h, rax"指令进行初始阶段利用，而是使用了"mov rdx+8h, rdx"指令，将一个自引用指针放入位图的pvScan0变量中。...

CVE-2015-5736

CVE-2015-5736 PoC para CVE-2015-5736 usando ROP, sobrescritura de PreviousMode y robo de Token solo con fines educativos...

elevationstation

提权站（Elevation Station） 窃取和复制 SYSTEM 令牌，娱乐与盈利！我们复制东西，制作双胞胎副本，然后骑走。 你用 Metasploit 的 getsystem 和 SysInternals PSEXEC 获取过系统权限，对吧？那么，这里有一个类似的独立版本……但至少目前没有杀毒软件的问题 😸 此工具还能让你成为 TrustedInstaller ，类似于 Process Hacker/System Informer 的功能。此功能非常新，于 2023 年 8 月 12 日添加至最新代码版本和二进制版本！ 💵💲...

CVE-2018-19323

CVE-2018-19323：技嘉 GDrv 利用框架 概述 本仓库包含针对 CVE-2018-19323 的完整高级利用框架，该漏洞存在于技嘉 gdrv.sys 驱动中。此漏洞允许无特权用户读写任意模型特定寄存器（MSR），从而导致完整的 Ring-0（内核）沦陷，并将权限提升至 NT AUTHORITY\SYSTEM。 该框架设计为模块化、健壮且功能丰富，为安全研究、红队行动和漏洞分析提供了全面的工具。 主要特性 完整内核利用： 通过泄露 IA32LSTAR MSR 获得内核基址并执行令牌窃取 shellcode，实现权限提升。 多架构支持： 动态适配 x86 、x64 和 ARM6...

CVE-2021-27965

CVE-2021-27965 Prueba de concepto para CVE-2021-27965 Desbordamiento de búfer basado en pila NOTA: Probablemente no actualizaré esto más aún existe la posibilidad de que lo termine. Actualmente tengo la capacidad de sobrescribir limpiamente el puntero de instrucción, pero creo que esto es...

moodle-token-stealer

Este repositorio no tiene un README...

AzTokenFinder

AzTokenFinder Es una pequeña herramienta para extraer JWT o datos que parecen JWT de diferentes procesos, como PowerShell, Excel, Word u otros. La idea se inspiró en el artículo del blog https://mrd0x.com/stealing-tokens-from-office-applications/ del increíble @mrd0x. En la nueva versión, añadí l...

CVE-2026-47237: Incorrect Privilege Assignment

Kubeflow Community Distribution helps users to install Kubeflow Platform in popular Kubernetes clusters. Prior to version 26.03-rc.1, a Kubeflow setup based on the official manifests or most other packaged Kubeflow distributions is vulnerable to authorization token stealing from any user of the...

MAL-2025-191275 Malicious code in @oku-ui/switch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 740a6698034fbce630b1da1ce44728782b3f71faffd3ee2801c45b6a3f9e6f7e The package @oku-ui/switch was found to contain malicious code. Source: google-open-source-security...

MAL-2025-191428 Malicious code in solomon-v3-stories (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a3c2b76ec7ca12640f848ff834bd3a10c3c2f6247a9b372905bf57e2d9f2194 The package solomon-v3-stories was found to contain malicious code. Source: ghsa-malware...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

Exploit for CVE-2025-8061

Lenovo-CVE-2025-8061 PoC fo...

Malicious code in ember-headless-form (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4687ef20e35f1ba6932bfe28dbaae50901c594a51071d24c97e6d496f7001382 Any computer that has this package installed or running should be considered fully compromised. All...

CVE-2024-47077

authentik is an open-source identity provider. Prior to versions 2024.8.3 and 2024.6.5, access tokens issued to one application can be stolen by that application and used to impersonate the user against any other proxy provider. Also, a user can steal an access token they were legitimately issued...

VectorKernel - PoCs For Kernelmode Rootkit Techniques Research

PoCs for Kernelmode rootkit techniques research or education. Currently focusing on Windows OS. All modules support 64bit OS only. NOTE Some modules use ExAllocatePool2 API to allocate kernel pool memory. ExAllocatePool2 API is not supported in OSes older than Windows 10 Version 2004. If you want...

mooSocial 3.1.8 - Reflected XSS Vulnerability

Exploit Title: mooSocial 3.1.8 - Reflected XSS Exploit Author: CraCkEr Vendor: mooSocial Vendor Homepage: https://moosocial.com/ Software Link: https://travel.moosocial.com/ Version: 3.1.8 Tested on: Windows 10 Pro Impact: Manipulate the content of the site CVE: CVE-2023-4173 Greetings ThePitBull...

Beehive Forum - Account Takeover

Exploit Title: Beehive Forum - Account Takeover Date:08/05/2022. Exploit Author: Pablo Santiago Vendor Homepage: https://www.beehiveforum.co.uk/ Software Link: https://sourceforge.net/projects/beehiveforum/ Version: 1.5.2 Tested on: Kali Linux and Ubuntu 20.0.4 CVE N/A PoC:...

Authorization

Improper authorization in GitLab Pages included with GitLab CE/EE affecting all versions from 11.5 prior to 14.7.7, 14.8 prior to 14.8.5, and 14.9 prior to 14.9.2 allowed an attacker to steal a user's access token on an attacker-controlled private GitLab Pages website and reuse that token on the...