Explotacion-RCE-Pentesting-BlueKeep-CVE-2019-0708-

Explotación de Vulnerabilidad BlueKeep CVE-2019-0708 en Entorno Controlado Proyecto académico enfocado en el análisis, ejecución y resolución de problemas durante la explotación de la vulnerabilidad BlueKeep CVE-2019-0708 en el servicio RDP de Windows Server 2008 R2, desarrollado para la asignatu...

ThrottleStopPPL

ThrottleStopPPL Una herramienta de prueba de concepto para gestionar los niveles de protección de Procesos Ligeros Protegidos PPL en Windows Server 2022 mediante la explotación de vulnerabilidades en el controlador ThrottleStop CVE-2025-7771. Descripción general Esta herramienta demuestra una...

Windows Server Update Service - Insecure Deserialization

Windows Server Update Service contains an insecure deserialization vulnerability caused by deserialization of untrusted data. An unauthorized attacker with network access can exploit this to execute arbitrary code remotely, potentially leading to full system compromise. id: CVE-2025-59287 info:...

CVE-2021-1732

CVE-2021-1732 CVE-­2021­-1732 Microsoft Windows 10 本地提权漏 研究及Poc/Exploit开发 受影响系统及应用版本 Windows Server, version 20H2 Server Core Installation Windows 10 Version 20H2 for ARM64­based Systems Windows 10 Version 20H2 for 32­bit Systems Windows 10 Version 20H2 for x64­based Systems Windows Server, versi...

CVE-2021-31166-Exploit

CVE-2021-31166-Exploit Exploit para la vulnerabilidad RCE de la pila de protocolos HTTP de Microsoft CVE-2021-31166 Una solicitud Http especialmente manipulada dirigida a una versión vulnerable de Windows resultará en un ataque DOS. Y el servidor se reiniciará con un error de pantalla azul...

CVE-2018-8414-POC

CVE-2018-8414 POC Windows Shell Package Setting Remote Code Execution Vulnerability Since : Windows 10 Version 1703 to 1803 / Windows Server Version 1709 to 1803 Note : Some time the exploit fail depending of the file location default policy settings, so for that just copy the file in the Package...

CVE-2026-40369

🚨 CVE-2026-40369 - Windows Kernel Elevation of Privilege Vulnerability Windows Kernel Heap-Based Buffer Overflow allowing local attackers to elevate privileges toNT AUTHORITY\SYSTEM. 📖 Overview CVE-2026-40369 is a High Severity privilege escalation vulnerability affecting Microsoft Windows Kernel...

cve-2017-7269

módulo msf corregido para cve-2017-7269 Se corrige el fallo cuando la longitud de la ruta física no es igual a 19, o hay un enlace de host. Se añaden las opciones: PhysicalPathLength, HttpHost para probar: ruta física del host: c:\inetpub\ , longitud=11 root@kitploit: msf use...

CVE-2022-21907

CVE-2022-21907 Un exploit DoS real para CVE-2022-21907 Soporta IPv4/IPv6/HTTP/HTTPS Sistemas afectados root@kitploit: - Windows - 10 Versión 1809 para sistemas de 32 bits - 10 Versión 1809 para sistemas basados en x64 - 10 Versión 1809 para sistemas basados en ARM64 - 10 Versión 21H1 para sistema...

ms08-067.py

📖 Overview This repository contains some python scripts implementation for the MS08-067 Windows Server Service vulnerability CVE-2008-4250. This is a classic remote code execution vulnerability affecting older Windows systems. 🛠️ Installation & Usage Prerequisites Python3 Authorized testing...

ShieldBreak

ShieldBreak - Vulnerabilidad 0day de Windows Defender Microsoft no ha parcheado correctamente la vulnerabilidad RoguePlanet CVE-2026-50656; este PoC demuestra un bypass completo del parche. El PoC se probó en la última versión de windows 11 25h2 canal Canary y windows server 2025; el PoC también...

Penetration-Testing-Assessment-23-04-2026

Penetration Testing Report – IIS WebDAV Exploitation Overview This project demonstrates a complete penetration testing lifecycle performed on a vulnerable target system. The assessment follows a structured approach including reconnaissance, scanning, enumeration, exploitation, and...

WSUS-CVE-2025-59287

WSUS-CVE-2025-59287...

magicNetdefs

magicNetdfs Reference https://github.com/Wh04m1001/DFSCoerce Usage Se considerarán futuras actualizaciones; por ahora solo se valida la explotabilidad de este método RPC. Más adelante se planteará el aprovechamiento específico del token SYSTEM. Description Se utiliza el protocolo MS-DFSNM:...

CVE-2025-50154

NTLM/SMB 加固与威胁狩猎工具包 作者： w01f 版本： 1.0 用途： 审计、加固并搜寻不安全的 NTLM/SMB 使用，以降低诸如 CVE-2025-50154 等风险。 CVE-2025-50154 概述 严重程度： 高 类型： NTLM 凭据泄露 + 补丁绕过（零点击） 影响系统： Windows 10/11，Windows Server 摘要： CVE-2025-50154 是对微软先前针对 CVE-2025-24054 补丁的绕过。即便已应用之前的缓解措施，精心构造的文件或 UNC 路径仍可触发 Windows 资源管理器 获取远程资源，并在无任何用户交互...

CVE-2026-56177

Use after free in Windows Server allows an authorized attacker to elevate privileges locally...

EUVD-2026-73366

Use after free in Windows Server allows an authorized attacker to elevate privileges locally...

CVE-2026-56177

CVE-2026-56177 is a use-after-free vulnerability in Windows Server that allows an authorized attacker to achieve local privilege elevation . The flaw is scored CVSS 3.1: 7.8 (HIGH) with a vector of local attack, low complexity, low privileges required, and no user interaction, resulting in high i...

2026-09 Security and Quality Rollup for .NET Framework 3.5, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Server 2012 for x64 (KB5126147)

2026-09 Security and Quality Rollup for .NET Framework 3.5, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Server 2012 for x64 KB5126147...

2026-09 Cumulative Update for Windows Server 2022 Datacenter: Azure Edition for x64-based Systems (KB5122882)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...