tor-rootkit

tor-rootkit A Python 3 standalone Windows 10 / Linux Rootkit. The networking communication get's established over the tor network. This rootkit is WIP. Disclaimer Use for educational purposes only. How to use 1. Clone the repo and change directory: root@kitploit: git clone...

SOC-Investigation-CVE-2024-49138

🛡️ Report di Indagine SOC: Sfruttamento di CVE-2024-49138 📌 Sintesi Esecutiva Titolo dell'Avviso: SOC335 - Rilevato sfruttamento di CVE-2024-49138 Severità: Alta Host di Destinazione: Victor 172.16.17.207 Sistema Operativo: Windows 10 Utente Principale: letsdefend Verdetto: True Positive Attività...

CVE-2022-21907

CVE-2022-21907 Sicherheitslücke im HTTP-Protokollstapel ermöglicht Remote-Codeausführung und potenziellen Systemabsturz. Inhaltsverzeichnis CVE-2022-21907 Beschreibung Umgebung Konfiguration des Opfer-Rechners Konfiguration des Angreifer-Rechners Exploit Proof of Concept Referenzen Beschreibung...

eviltree

EvilTree A standalone python3 remake of the classic "tree" command with the additional feature of searching for user provided keywords/regex in files, highlighting those that contain matches. Created for two main reasons: While searching for secrets in files of nested directory structures, being...

SMBGhost-SMBleed-scanner

SMBGhost CVE-2020-0796 और SMBleed CVE-2020-1206 स्कैनर c 2020 ZecOps, Inc. - https://www.zecops.com - हैकर्स की गलतियाँ खोजें केवल शैक्षिक और कॉर्पोरेट वातावरण में परीक्षण के लिए अभिप्रेत है। ZecOps इस कोड के लिए कोई जिम्मेदारी नहीं लेता, अपने जोखिम पर उपयोग करें। यदि आप सर्वर, एंडपॉइंट और मोबाइल...

How-to-Patch-CVE-2025-32709

CVE-2025-32709 भेद्यता को कैसे पैच करें CVE-2025-32709 के लिए वास्तविक दुनिया का पैचिंग वर्कफ़्लो। हॉटफ़िक्स इंस्टॉल से लेकर SIEM अलर्ट मान्यकरण तक—यह रिपॉज़िटरी स्क्रीनशॉट, कमांड और डिटेक्शन लॉजिक के साथ हर चरण का दस्तावेजीकरण करती है। Wazuh भेद्यता पहचान डैशबोर्ड का स्क्रीनशॉट जो Windows 10 Pro...

TickTock

TickTock Dieses Repository demonstriert einen PoC-Speicherscanner zum Auflisten von Timer-Queue-Timern, wie sie in der Ekko-Sleep-Obfuscation verwendet werden: https://github.com/Cracked5pider/Ekko. Eine vollständige technische Erläuterung finden Sie im zugehörigen Blogbeitrag hier:...

CVE-2023-23397-Patch

Patch di Aggiornamento di Windows CVE-2023-23397 Script di patch PowerShell per CVE-2023-23397 per Windows 10 e 11 Questa versione dello script ti consente di verificare se il tuo dispositivo ha ricevuto le patch più recenti per l'ultimo exploit Microsoft. Se gli aggiornamenti di sicurezza non...

SMB-Penetration-Testing-NTLM-Relay-Version-2-

SMB Penetrationstest – NTLM-Relay-Angriff Red Team Lab – NTLM-Relay via LLMNR-Poisoning, CVE-2007-2447, NTLMv2-Hash-Cracking & NT AUTHORITY\SYSTEM unter Windows 10 Autor Feld| Details ---|--- Name| Younes GitHub| @Youneskc Typ| Penetrationstest-Labor Status| Abgeschlossen Rechtlicher...

forti_shield

fortishield Um POC combinado para CVE-2021-31955, CVE-2015-4077 e CVE-2015-5736 Esta uma das possíveis soluções para um extra mile na versão de 2022 do curso EXP-401. Este extra mile foi removido na versão de 2025 do curso. Esta solução não funcionará para o extra mile atual sem alterar os offset...

VAPT-Report-on-SMB-Exploitation-in-Windows-10-Finance-Endpoint

VAPT-Bericht zur SMB-Ausnutzung auf einem Windows 10 Finanz-Endpunkt Dieser Bericht beschreibt eine strukturierte VAPT-Durchführung mit Fokus auf PCI DSS-Compliance, SMB-Dienstaufzählung und Ausnutzung von CVE-2017-0144 EternalBlue auf einem Windows 10-Rechner innerhalb einer finanzorientierten...

CVE-2016-3309_Reloaded

Fallstudie zur Kernel-Ausnutzung - "Wilder" Pool-Overflow auf Win10 x64 RS2 CVE-2016-3309 Reloaded Dieses GitHub-Repository enthält Exploits für die kürzlich gepatchte win32kfull!bFill-Schwachstelle. Die Ausführung des Palette- oder Bitmap-Exploits gewährt Ihnen SYSTEM-Privilegien auf dem...

MsSettingsDelegateExecute

MsSettingsDelegateExecute Bypass UAC su Windows 10/11 x64 utilizzando la chiave di registro DelegateExecute di ms-settings. Questo progetto di Visual Studio compilerà un binario statico x64 per testare questo problema. Licenza Questi file sono disponibili sotto la licenza BSD a 3 clausole...

AntiKernelDebug-POC

AntiKernelDebug-poc Was ist das? Ein POC, der zeigt, wie man Windows-Kernel-Debugging mithilfe des Pool-Tags erkennt. Wie funktioniert dieser POC eigentlich? Fragt die Pool-Tag-Informationen des Systems ab und prüft, ob diese TagUlong == 'oIdK' entsprechen. Getestet unter Win10 1809 Kompilieren...

amd-ryzen-master-driver-v17-exploit

Beacon Object File do Cobalt Strike para exploração de kernel usando o AMD Ryzen Master Driver versão 17. Construído por Tijme. Créditos ao Alex por me ensinar! Possibilitado pela Northwave Security Descrição Este é um Beacon Object File BOF e executável do Cobalt Strike CS que explora o AMD Ryze...

Cronos-Rootkit

Cronos Rootkit Cronos ist ein Windows 10/11 x64 Ring-0-Rootkit. Cronos kann Prozesse verstecken, schützen und deren Rechte durch Token-Manipulation erhöhen. Funktionen Prozess verstecken Prozessrechte erhöhen Prozess schützen Beiträge Beiträge sind willkommen...

CVE-2026-62892 Capability Access Management Service (camsvc) Elevation of Privilege Vulnerability

...

2026-08 Cumulative Update for Windows 10 Version 1607 for x64-based Systems (KB5120418)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

2026-08 Cumulative Update for .NET Framework 3.5, 4.8 and 4.8.1 for Windows 10 Version 22H2 for x64 (KB5121647)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

2026-08 Cumulative Update for Windows 10 Version 21H2 for ARM64-based Systems (KB5120249)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...