DroppedConnection

DroppedConnection Emulates a Cisco ASA Anyconnect VPN service, accepting any credentials and logging them before serving VBS to the client that gets executed in the context of the user. Blog post:...

-SCTT-2026-33-0002-DWM-Visual-Field-Singularity

SCTT-2026-33-0002: DWM Visual-Field Singularity 📡 Theoretical Classification ID: SCTT-2026-33-0002 Researcher: Americo Simoes SimoesCTT Physics: Theorem 4.2 - Turbulent Phase Transition TPT Constant: α = 0.0302011 Target: Desktop Window Manager dwm.exe / Windows Graphics Component Obsoletes:...

SCTT-2026-33-0002-DWM-Visual-Field-Singularity

SCTT-2026-33-0002: DWM Visual-Field Singularity 📡 Theoretical Classification ID: SCTT-2026-33-0002 Researcher: Americo Simoes SimoesCTT Physics: Theorem 4.2 - Turbulent Phase Transition TPT Constant: α = 0.0302011 Target: Desktop Window Manager dwm.exe / Windows Graphics Component Obsoletes:...

-EXPLOIT-CVE-2023-36025

EXPLOIT CVE-2023-36025 - Description Windows SmartScreen Security Feature Bypass Vulnerability Usage NOTE handler waiting for tcp request for target P.S configure CVE-2023-36025.vbs file to change the ip and port to machine ip and port that is being used for the TCP handler configure reverse TCP...

WHFB-PinCapture

WHFB-PinCapture TL;DR On a host where Windows Hello is protected by VBS/VSM an isolated NgcIso container in VTL1 + a TPM , the PIN is not recoverable offline and online brute-force is blocked by the secure-kernel trustlet. The only reliable route is capture-at-entry. This project captures the PIN...

macro_pack

macropack Short description Warning: MacroPack is not maintained since 2021, if you are a pro and need Offensive infosec tools for initial access, assume breach, EDR bypass, check https://www.balliskit.com MacroPack Community is a tool used to automatize obfuscation and generation of retro format...

Trusted Execution Environment Privilege Escalation

The vulnerability of the trusted execution environment for Virtualization-Based Security VBS in Windows operating systems stems from operations that go beyond the buffer boundaries in memory. Exploiting this vulnerability can allow attackers to enhance their privileges...

Four-Byte Write and Timing Bug Let Researchers Run Code in Windows SmartScreen Enclave

Security researchers ran their own code inside a protected part of Windows that is meant to stay sealed off even when the rest of the computer is taken over. The protected area is a VBS enclave , an isolated slice of memory the operating system uses to guard secrets, and the one they broke into...

trusted execution environment Privilege Escalation

The vulnerability of the trusted execution environment for Virtualization-Based Security VBS in Windows operating systems is related to a numerical overflow condition. Exploiting this vulnerability can allow an attacker to increase their privileges...

CVE-2026-96914

Integer overflow or wraparound in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to elevate privileges locally...

CVE-2026-70097

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to perform spoofing locally...

CVE-2026-70075

Time-of-check time-of-use toctou race condition in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to bypass a security feature locally...

CVE-2026-108471

Untrusted pointer dereference in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to elevate privileges locally...

CVE-2026-102211

Use after free in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to elevate privileges locally...

CVE-2026-108471

Windows Virtualization-Based Security (VBS) Enclave is susceptible to an untrusted pointer dereference vulnerability. This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is characterized by a high severity base score of 8.8 , with significant impacts ...

EUVD-2026-100449

Heap-based buffer overflow in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to elevate privileges locally...

CVE-2026-108130

A heap-based buffer overflow exists in the Windows Virtualization-Based Security (VBS) Enclave . This vulnerability allows an authorized attacker to achieve local privilege elevation . No specific exploit information or remediation details are provided in the documents beyond the confirmation of ...

CVE-2026-102211

A use after free vulnerability exists in the Windows Virtualization-Based Security (VBS) Enclave . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-416 (Use After Free) and CWE-362 (Race Condition). No specific exploit detail...

EUVD-2026-100365

Use after free in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to elevate privileges locally...

CVE-2026-96914

An integer overflow or wraparound vulnerability exists within the Windows Virtualization-Based Security (VBS) Enclave . This flaw allows an authorized attacker to achieve local privilege escalation . While the vulnerability is confirmed and has a high severity score (8.8), specific details regard...