CVE-2024-30052

此仓库包含与 CVE-2024-30052 相关的材料。关于该漏洞的更多详细信息，请参阅我的博客文章。 结构 builder 文件夹包含用于构建可利用漏洞的转储文件的程序源码。 poc 文件夹包含三个概念验证文件，打开后会启动 calc.exe：chm、hta 和 py。 manifest 文件夹包含 VS 17.8.10 版本的清单文件，方便在本地测试时下载该特定版本。 运行 PoC 在 Visual Studio 2022 中打开 CVE-2024-30052-builder.sln 并编译。 运行 CVE-2024-30052-builder.exe...

CVE-2020-27955-LFS

Git-lfs Remote Code Execution RCE exploit CVE-2020-27955 versione .bat / powershell Vulnerabili: git, GitHub CLI gh, GitHub Desktop, Visual Studio Code, SourceTree, SmartGit, GitKraken ecc. Scoperto da Dawid Golunski https://legalhackers.com https://exploitbox.io Testato su Windows su: git, GitHu...

Spartacus

!CAUTION Dieses Repository wird nicht mehr gewartet. Besuchen Sie https://github.com/sadreck/Spartacus für die neueste Version. Spartacus DLL/COM Hijacking Toolkit Warum „Spartacus“? Wenn Sie den Film Spartacus aus dem Jahr 1960 gesehen haben, erinnern Sie sich an die Szene, in der die Römer...

CVE-2020-27955-LFS-main

Git-lfs 远程代码执行（RCE）漏洞利用 CVE-2020-27955（.bat / powershell 版本） 受影响：git、GitHub CLI gh、GitHub Desktop、Visual Studio Code、SourceTree、SmartGit、GitKraken 等。 发现者：Dawid Golunski https://legalhackers.com https://exploitbox.io 已在 Windows 上测试： git、GitHub CLI gh、GitHub Desktop、Visual Studio...

CVE-2024-30085

CVE-2024-30085 CVE-2024-30085 Alex Birnberg Versioni interessate: Windows 11 23H2 Originariamente da qui Leggermente modificato per compilare senza configurazione su Visual Studio...

CVE-2020-27955

Git-lfs Remote Code Execution RCE exploit CVE-2020-27955 .bat / powershell version Vulnerabili: git, GitHub CLI gh, GitHub Desktop, Visual Studio Code, SourceTree, SmartGit, GitKraken ecc. Scoperto da Dawid Golunski https://legalhackers.com https://exploitbox.io Testato su Windows su: git, GitHub...

tiny_tracer

tinytracer A Pin Tool for tracing: API calls, including input and output of selected functions defined local functions, and functions from statically linked libraries selected instructions: RDTSC, CPUID, INT inline system calls, including parameters of selected syscalls transition between section...

reko

reko - a general purpose decompiler. Reko Swedish: "decent, obliging" is a decompiler for machine code binaries. This project is freely available under the GNU General Public License. The project consists of front ends, core decompiler engine, and back ends to help it achieve its goals. A...

systeminformer

System Informer A free, powerful, multi-purpose tool that helps you monitor system resources, debug software and detect malware. Brought to you by Winsider Seminars & Solutions, Inc...

kekeo

kekeo kekeo is a little toolbox I have started to manipulate Microsoft Kerberos in C and for fun ASN.1 library In kekeo, I use an external commercial library to deal with Kerberos ASN.1 structures: OSS ASN.1/C http://www.oss.com/asn1/products/asn1-c/asn1-c.html It was the only code...

maldev-for-dummies

Malware Development for Dummies In the age of EDR, red team operators cannot get away with using pre-compiled payloads anymore. As such, malware development is becoming a vital skill for any operator. Getting started with maldev may seem daunting, but is actually very easy. This workshop will sho...

CVE-2020-27955

Git-lfs Remote Code Execution RCE exploit CVE-2020-27955 versione .bat/powershell Vulnerabili: git, GitHub CLI gh, GitHub Desktop, Visual Studio Code, SourceTree, SmartGit, GitKraken ecc. Scoperto da Dawid Golunski https://legalhackers.com https://exploitbox.io Testato su Windows su: git, GitHub...

CVE-2022-24521

CVE-2022-24521 CVE-2022-24521 poc win10 21h2 19044.1620 win11 21h2 22000.593 Informazioni di base sulla compilazione Versione Windows SDK: 10.0 versione più recente installata Set di strumenti della piattaforma: Visual Studio 2022 v143 Standard del linguaggio C++: predefinito standard ISO C++14...

CVE-2024-35250-BOF

CVE-2024-35250-BOF Implementazione del file oggetto Beacon BOF per CVE-2024-35250. Compilazione Il modello di progetto proviene da bof-vs. Compilare con la configurazione Release di Visual Studio 2019/2022. Riconoscimenti https://github.com/varwara/CVE-2024-35250...

CVE-2018-8172

CVE-2018-8172 Microsoft Visual Studio CVE-2018-8172 Schwachstelle bei der Remotecodeausführung http://darkcert.com/2018/08/microsoft-visual-studio-remote-code-execution-cve-2018-8172/ https://twitter.com/SyFi2k...

CVE-2024-35250-BOF

CVE-2024-35250-BOF Beacon Object File BOF-Implementierung von CVE-2024-35250 für Cobalt Strike. Kompi... Kompiliert mit Visual Studio. Danksagung Alle Credits für den Exploit-Code gehen an den ursprünglichen Autor varwara. Haftungsausschluss Ich übernehme keinerlei Verantwortung für irgendwelche...

mssqlproxy

mssqlproxy mssqlproxy is a toolkit aimed to perform lateral movement in restricted environments through a compromised Microsoft SQL Server via socket reuse. The client requires impacket and sysadmin privileges on the SQL server. Please read this article carefully before continuing. It consists of...

nray

nray Overview Nray is a free, platform and architecture independent port and application layer scanner. nray runs in a distributed manner to speed up scans and to perform scans from different vantage points. Event-based results allow to further process information during the scan, e.g. using tool...

PMD

Desenvolvimento Prático de Malware Exercício 1 - Configuração do Ambiente 1. Configure uma máquina virtual Windows dentro de um hipervisor. a. Certifique-se de tirar um snapshot da sua instalação base. 2. Baixe e instale o Visual Studio 2022 - https://visualstudio.microsoft.com/vs/ a. Selecione a...

idacode

IDACode IDACode makes it easy to execute and debug Python scripts in your IDA environment without leaving Visual Studio Code. The VS Code extension can be found on the marketplace. IDACode is still in a very early state and bugs are to be expected. Please open a new issue if you encounter any...