EDR-Freeze

EDR-Freeze This is a tool that exploits the software vulnerability of WerFaultSecure to suspend the processes of EDRs and antimalware without needing to use the BYOVD Bring Your Own Vulnerable Driver attack method. EDR-Freeze operates in user mode, so you don't need to install any additional...

Windows-11-24h2-Kernel-Exploit

Windows-11-24h2-Kernel-Exploit Windows 11 24h2 LPE Kernel Exploitation. CVE-2020-12446eneio64.sys...

CVE-2025-60709

🚨 EXPLOIT PoC — FOR SECURITY RESEARCH, VULNERABILITY ANALYSIS AND DEFENSIVE PURPOSES ONLY 🚨 PoC DE EXPLOIT — SOLO PARA INVESTIGACIÓN DE SEGURIDAD, ANÁLISIS DE VULNERABILIDADES Y FINES DEFENSIVOS 🌐 Idiomas / Languages 🇪🇸 Español 🇬🇧 English 🇪🇸 Documentación en Español Descripción CVE-2025-60709 es...

CVE-2026-21250

CVE-2026-21250: Windows HTTP.sys Local Privilege Escalation Windows 11 24H2 - Local Privilege Escalation 🚨 Technical analysis and resources for vulnerability CVE-2026-21250 Windows 11 24H2 / 25H2 - Windows Server 2022/2025 This repository contains technical documentation and resources for studyin...

windows_kernel_shadow_stack

Proof of Concepts This project aims to highlight certain aspects of the shadow stack mitigation implemented by Microsoft in Windows 11. The code is specifically focused on Windows 11 24H2. It may not work on other version of Windows 11, due to the kernel offset management. The project is divided...

Microsoft Windows TCP/IP buffer error vulnerability

Microsoft Windows TCP/IP is a component provided by Microsoft Corporation that offers TCP/IP configuration functions for Windows. There are security vulnerabilities present in Microsoft Windows TCP/IP. The following products and versions are affected: Windows Server 2022, Windows Server 2022 Serv...

Microsoft Windows Push Notifications Vulnerability Due to Competition Conditions

Microsoft Windows Push Notifications is a push notification service provided by the American company Microsoft. It provides a reliable way to deliver new updates. There are compatibility issues with Microsoft Windows Push Notifications. The following products and versions are affected: Windows...

Microsoft Windows Kerberos: Improper exception handling vulnerability

Microsoft Windows Kerberos is a software developed by Microsoft for authentication in network clusters. As a network authentication protocol, its primary goal is to provide robust authentication services for client/server applications through a key system. There are code-related vulnerabilities i...

Microsoft Windows Kernel Buffer Error Vulnerability

The Microsoft Windows Kernel is the kernel of the Windows operating system developed by Microsoft Corporation. There are security vulnerabilities in the Microsoft Windows Kernel. Attackers can exploit these vulnerabilities to gain higher privileges. The following products and versions are affecte...

Microsoft Hyper-V buffer error vulnerability

Microsoft Hyper-V is an application developed by Microsoft Corporation in the United States. It is a system management program that enables desktop virtualization. There is a code execution vulnerability present in Microsoft Hyper-V. Attackers can exploit this vulnerability to execute arbitrary...

Microsoft Windows DHCP Server input validation error vulnerability

Microsoft Windows DHCP Server is a core service of the American company Microsoft, used for automatically retrieving network configuration information. There are security vulnerabilities in Microsoft Windows DHCP Server. The following products and versions are affected: Windows 10 Version 22H2 fo...

Microsoft Windows Secure Boot software supply chain vulnerabilities

Microsoft Windows Secure Boot is a security boot mechanism developed by Microsoft Corporation. There are security vulnerabilities associated with Microsoft Windows Secure Boot. Attackers can exploit these vulnerabilities to bypass certain features. The following products and versions are affected...

Microsoft Windows security vulnerabilities

Microsoft Windows is an operating system used by personal devices by the American company Microsoft. There are security vulnerabilities in Microsoft Windows. Attackers can exploit these vulnerabilities to execute code remotely. The following products and versions are affected: Windows 10 Version...

Microsoft Windows TCP/IP Resource Management Error Vulnerability

Microsoft Windows TCP/IP is a component provided by Microsoft Corporation that offers TCP/IP configuration functions for Windows. There is a resource management vulnerability in Microsoft Windows TCP/IP. The following products and versions are affected: Windows 10 Version 1809 for 32-bit systems,...

Microsoft Windows Secure Boot security vulnerabilities

Microsoft Windows Secure Boot is a security boot feature provided by Microsoft Corporation. There are security vulnerabilities associated with Microsoft Windows Secure Boot. Attackers can exploit these vulnerabilities to bypass certain features. The following products and versions are affected:...

Microsoft Windows Kernel security vulnerabilities

The Microsoft Windows Kernel is the kernel of the Windows operating system developed by Microsoft Corporation. There are security vulnerabilities present in the Microsoft Windows Kernel. Attackers can exploit these vulnerabilities to gain higher privileges. The following products and versions are...

Microsoft Win32k race condition vulnerability

Microsoft Win32k is a system file used by Microsoft for multi-user management in Windows. There are competitive conditions vulnerabilities associated with Microsoft Win32k. The following products and versions are affected: Windows Server 2019 Server Core installation, Windows Server 2022, Windows...

Microsoft Windows Cryptographic Services security vulnerabilities

Microsoft Windows Cryptographic Services are encryption services provided by Microsoft Corporation. There are security vulnerabilities in Microsoft Windows Cryptographic Services. Attackers can exploit these vulnerabilities to gain higher privileges. The following products and versions are...

Microsoft Hyper-V numerical error vulnerability

Microsoft Hyper-V is an application developed by Microsoft Corporation in the United States. It is a system management program that enables desktop virtualization. Microsoft Hyper-V has a numerical error vulnerability. Attackers can exploit this vulnerability to execute code. The following produc...

Microsoft Windows Resource Management Vulnerability

Microsoft Windows is an operating system used by personal devices by the American company Microsoft. There is a resource management vulnerability in Microsoft Windows. Attackers can exploit this vulnerability to gain higher privileges. The following products and versions are affected: Windows 10...