Lucene search
+L

703 matches found

Kitploit
Kitploit
added 2026/09/15 4:33 a.m.6 views

Cve-2022-26809

Cve-2022-26809 CVE-2022-26809 This repo just simply research for the CVE, for more detailed ananlysis,please refer here. UPDATE:05/19 2022 This ananlyze hasn't been finished yet.... UPDATE:05/22 2022 HuanGMz Post and corelight blog show the real vulnerable point:...

10CVSS8.4AI score0.90961EPSS
SaveExploits14References1
Kitploit
Kitploit
added 2026/09/15 3:43 a.m.9 views

doctrack

Doctrack Herramienta para manipular y armamentizar documentos Office Open XML. Características Crear documentos Office Open XML Word, Excel Insertar píxeles de seguimiento y rutas UNC Inyección de plantilla remota Insertar partes CustomXML Inspeccionar URLs de destino externas, metadatos y partes...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/15 3:29 a.m.10 views

ms-photos_NTLM_Leak

Microsoft ms-photos URI NTLM Leak New vulnerability allowing to leak NTLM hashes from browsers with one click By Ruben Enkaoua Description The Microsoft ms-photos URI scheme takes fileName as parameter, which can be submitted with a UNC path, leaking NTLMv2-SSP hashes one opened. By crafting a...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/15 2:44 a.m.5 views

CVE-2022-26809

CVE-2022-26809 This repo just simply research for the CVE, for more detailed ananlysis,please refer here. UPDATE:05/19 2022 This ananlyze hasn't been finished yet.... UPDATE:05/22 2022 HuanGMz Post and corelight blog show the real vulnerable point: OSFCASSOCIATION::ProcessBindAckOrNak This...

10CVSS8.3AI score0.90961EPSS
SaveExploits14References1
Kitploit
Kitploit
added 2026/09/15 1:58 a.m.6 views

SMBRat

SMBRat A Windows Remote Administration Tool in Visual Basic Script Idea Windows Environments like Active Directory Networks, get really bloated with SMB traffic. All hosts get Policies from the SYSVOL , configurations need remote files to work, desktop shortcuts tend to point to...

6AI score
SaveExploits0References5
Kitploit
Kitploit
added 2026/09/15 1:00 a.m.4 views

CVE-2023-23397-PoC

CVE-2023-23397-PoC Versión solo de envío en C de CVE-2023-23397-POC-Powershell por Oddvar Moe @oddvarmoe Envía un correo electrónico desde la dirección asociada a la cuenta de Outlook. root@kitploit: .\CVE202323397.exe --help CVE202323397 1.0.0.0 Copyright c 2023 -t, --to Required. Recipient emai...

9.8CVSS8.2AI score0.97408EPSS
SaveExploits19References1
Kitploit
Kitploit
added 2026/09/14 9:01 p.m.11 views

Coercer

Un script en Python para forzar automáticamente a un servidor Windows a autenticarse en una máquina arbitraria mediante muchos métodos. Soporte para Windows Para compilar un binario para Windows, descarga el script installer.ps1 de este repositorio. Ejecútalo simplemente sin argumentos para crear...

6AI score
SaveExploits0References8
Kitploit
Kitploit
added 2026/09/14 4:01 p.m.8 views

UnCanny

UNCanny Coerce La idea detrás de esta investigación era simple, ya que quería encontrar mi propia técnica de coerción. Empecé buscando nuevas superficies de ataque RPC, pero después de que Microsoft agregó monitoreo de actividad RPC...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/14 3:04 p.m.8 views

CVE-2025-33053-Checker-PoC

CVE-2025-33053 Vulnerability Checker & Proof-of-Concept PoC Checker Proof PoC Proof A complete set of tools to check and demonstrate potential exploitation of CVE-2025-33053 , a critical WebDAV-based Remote Code Execution RCE vulnerability affecting Windows systems. 📌 About CVE-2025-33053...

8.8CVSS7.9AI score0.87607EPSS
SaveExploits10
Kitploit
Kitploit
added 2026/09/14 2:13 p.m.5 views

ItWasAllADream

It Was All A Dream A CVE-2021-34527 a.k.a PrintNightmare Python Scanner. Allows you to scan entire subnets for the PrintNightmare RCE not the LPE and generates a CSV report with the results. Tests exploitability over MS-PAR and MS-RPRN. This tool has "de-fanged" versions of the Python exploits, i...

9CVSS7.9AI score0.99792EPSS
SaveExploits41References2
Kitploit
Kitploit
added 2026/09/14 1:59 p.m.6 views

CVE-2022-39838

CVE-2022-39838 Suggested description Systematica FIX Adapter ALFAFX 2.4.0.25 13/09/2017 allows remote file inclusion via a UNC share pathname, and also allows absolute path traversal to local pathnames. Additional Information PoC:...

8.6CVSS7.8AI score0.01901EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/14 1:19 p.m.5 views

CVE-2023-23397_EXPLOIT

CVE-2023-23397 MS Outlook Vulnerability Exploitation CVE-2023-23397 is a vulnerability in Microsoft Outlook that allows an attacker to potentially exfiltrate user authentication details. The vulnerability stems from the ability of an attacker to specify a Universal Naming Convention UNC path in t...

9.8CVSS8.2AI score0.97408EPSS
SaveExploits19
Kitploit
Kitploit
added 2026/09/14 10:05 a.m.9 views

CVE-2023-23397

CVE-2023-23397 A proof of concept for CVE-2023-23397 for security testing. Modify lines 11 and 12 with the attacker UNC path and target email address...

9.8CVSS8.1AI score0.97408EPSS
SaveExploits19
Kitploit
Kitploit
added 2026/09/14 6:59 a.m.6 views

CVE-2024-40586-Windows-Coerced-Authentication-in-FortiClient

CVE-2024-40586 Windows Coerced Authentication in FortiClient On Windows system, it was found that FortiClient App version 7.0.8.0427 allow a remote unprivileged user to coerce Windows hosts authenticate to other machines via a named pipe responsible for FortiSSLVPNdaemon service. It was observed...

6.7CVSS7AI score0.00248EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/14 5:47 a.m.8 views

CVE-2025-24054

Windows File Explorer Zero Click NTLMv2-SSP Hash Disclosure 🎥 Demonstration POC + March 2025 Patch bypass 🎥 patch bypass Click the image above to watch the vulnerability demonstration 📋 Technical Overview This repository provides a comprehensive research framework analyzing the vulnerability chai...

6.5CVSS7.6AI score0.58909EPSS
SaveExploits21
Kitploit
Kitploit
added 2026/09/14 5:29 a.m.4 views

CVE-2023-23397

A Simple PoC in PowerShell for CVE-2023-23397 CVE-2023-23397 is a vulnerability in MS Outlook that allows an attacker to potentially exfil user authentication details. The vulnerability relates to the the ability for an attacker to specify a UNC path in the "ReminderSoundFile" property within an...

9.8CVSS8.2AI score0.97408EPSS
SaveExploits19
Kitploit
Kitploit
added 2026/09/14 2:51 a.m.8 views

CVE-2023-23397

CVE-2023-23397 CVE-2023-23397 C PoC 1- download the msgkit 2- edit the appointment class and add the below: 3- create a new class inside the project to set the proprieties of the msg file: root@kitploit: using MsgKit.Enums; using System; using System.Collections.Generic; using System.Linq; using...

9.8CVSS8.2AI score0.97408EPSS
SaveExploits19
Kitploit
Kitploit
added 2026/09/13 10:30 p.m.7 views

CVE-2023-23397

CVE-2023-23397 Exploitation & Mitigation Demo 📌 Overview This project demonstrates the detection, exploitation, and mitigation of CVE-2023-23397 , a critical zero-click NTLM relay vulnerability in Microsoft Outlook for Windows. Exploited via calendar invites, this vulnerability allows attackers t...

9.8CVSS8.2AI score0.97408EPSS
SaveExploits19References2
Kitploit
Kitploit
added 2026/09/13 5:52 p.m.7 views

CVE-2021-34527

PrintNightmare CVE-2021-34527 このPrintNightmareエクスプロイトのバージョンは、Cube0x0によって作成されたコードに基づいています。以下の機能があります。 複数のホストを標的にする能力。 ペイロード配信用の組み込みSMBサーバーを備えており、オープンなファイル共有が不要。 エクスプロイトにはMS-RPRNおよびMS-PARプロトコルの両方が含まれています( CMD引数で定義 )。 @gentilkiwiのUNCバイパス技術を実装。 インストール 実行する前に、最新バージョンのimpacketをインストールしてください:...

9CVSS8.2AI score0.99792EPSS
SaveExploits41References3
Kitploit
Kitploit
added 2026/09/13 4:59 p.m.6 views

CVE-2023-23397-Report

CVE-2023-23397-Report An exploitation demo of Outlook Elevation of Privilege Vulnerability CVE-2023-23397 is a critical EoP vulnerability in Microsoft Outlook that is triggered when an attacker sends a message with an extended MAPI property with a UNC path to an SMB TCP 445 share on a threat...

9.8CVSS8.1AI score0.97408EPSS
SaveExploits19
Rows per page
Query Builder