1727 matches found
concealed_position
Concealed Position Concealed Position is a local privilege escalation attack against Windows using the concept of "Bring Your Own Vulnerability". Specifically, Concealed Position CP uses the as designed package point and print logic in Windows that allows a low privilege user to stage and install...
commando-vm
What is CommandoVM? Complete Mandiant Offensive VM "CommandoVM" is a comprehensive and customizable, Windows-based security distribution for penetration testing and red teaming. CommandoVM comes packaged with a variety of offensive tools not included in Kali Linux which highlight the effectivenes...
sysmon-config
sysmon-config | A Sysmon configuration file for everybody to fork This is a Microsoft Sysinternals Sysmon configuration file template with default high-quality event tracing. The file should function as a great starting point for system change monitoring in a self-contained and accessible package...
PrivescCheck
PrivescCheck Quickly identify common Windows vulnerabilities and configuration issues that are not necessarily covered by public security standards, and collect useful information for exploitation and post-exploitation tasks. !IMPORTANT A major aspect to be aware of when using this tool is that a...
WSASS
WSASS これは、PPL（Protected Process Light）によって保護されたプロセス（LSASS.EXE など）のメモリをダンプするために、旧バージョンの WerfaultSecure.exe プログラムを使用するツールです。出力は Windows MINIDUMP 形式です。 このツールは、"MDMP" マジックヘッダーを自動的に PNG マジックヘッダーに置き換えます。ダンプ完了後は、ファイル先頭の元の 4 バイトマジックを、元の 4 バイト 0x4D, 0x44, 0x4D, 0x50 "MDMP" に戻す必要があります。 コマンドライン構文 WSASS.exe...
ctftool
CTFTOOL Just want to test the SYSTEM exploit? Click here. An Interactive CTF Exploration Tool This is ctftool, an interactive command line tool to experiment with CTF, a little-known protocol used on Windows to implement Text Services. This might be useful for studying Windows internals, debuggin...
ludus-defender-lab
Ludus Defender 实验室 用于 Windows 安全实验室的 Ludus range 配置和 Ansible 角色，预先配置了 MDE 和 MDI，并包含一个完全错误配置的 ADCS 安装，用于检测覆盖测试。 配置| VMs| 用途 ---|---|--- zsec-mde-mdi-lab.yml| DC01 + WKS01| 包含 ADCS ESC1–ESC15 的 MDE/MDI 检测实验室 要求 已安装并配置 Ludus 已在你的环境中设置 LUDUSAPIKEY VM 模板：win2022-server-x64-template 部署 Install roles ru...
TokenUniverse
토큰 유니버스 토큰 유니버스 는 Windows 보안 메커니즘 을 실험 및 연구하기 위한 고급 도구입니다. 토큰 생성, 보기, 가장, 수정, 프로세스 생성, 로컬 보안 기관 관리, 다양한 객체의 접근 권한 확인 및 보안 수정 등을 위한 UI를 제공합니다. 이 프로그램은 LPAC AppContainer 샌드박스부터 SeTcbPrivilege 및 SeCreateTokenPrivilege 가 있는 SYSTEM까지 다양한 권한 수준에서 적어도 부분적으로 유용한 기능을 제공할 수 있습니다. 다운로드 이 도구는 Windows 7 이상을...
CredsLeaker
CredsLeaker v4.x A big shoutout to @ApSecDev who took this project to the next level! Kudos! This script used to display a powershell credentials box asked the user for credentials. However, That was highly noticeable. Now it's time to utilize Windows Security popup! Features AD domain...
EventHorizon
EventHorizon EventHorizon은 보안 분석가 및/또는 연구자에게 ETWEvent Tracing for Windows 텔레메트리와 시그마 유사 규칙을 결합하여 강력한 엔드포인트 탐지 및 대응 기능을 제공하는 도구입니다. 그렇지만 EventHorizon은 적절한 솔루션을 대체하는 것은 아닙니다. 이 프로젝트는 주로 ETW 텔레메트리를 수집하고 코드를 작성하지 않고도 탐지 규칙을 생성할 수 있는 편의성을 제공하기 위한 것입니다. 이러한 편의성을 높이기 위해 EventHorizon의 설정 과정은 최대한 간단하게...
attack_monitor
Attack Monitor Attack Monitor는 Windows 7/2008및 이후 모든 버전 워크스테이션/서버의 보안 모니터링 기능을 강화하고 맬웨어의 동적 분석을 자동화하기 위해 작성된 Python 애플리케이션입니다. 현재 모드상호 배타적: 엔드포인트 탐지ED 맬웨어 분석전용 가상 머신에서 다음 소스의 이벤트 기반: Windows 이벤트 로그 Sysmon Watchdog파일 시스템 모니터링 Python 라이브러리 TShark맬웨어 분석 모드만 해당 현재 버전 0.9.0알파 연락처 [email protected]...
TelemetrySource
TelemetrySource テレメトリソースからイベントをトリガーする関数をマッピングするために作成されたプロジェクトです。 メインマッピングシート: Event Mapping Google Sheet 現在マッピングされているソース: Sysmon Windows セキュリティイベント Microsoft-Windows-Security-Auditing 脅威インテリジェンスイベント Microsoft-Windows-Threat-Intelligence 各ソースには、マッピングの仕組みを理解するために必要な情報をまとめた独自のREADMEファイルがあります。 ブログ:...
DarthSidious
Darth Sidious The goal is simple To share my modest knowledge about hacking Windows systems. This is commonly refered to as red team exercises. This book however, is also very concerned with the blue team; the defenders. That is, helping those who are working as defenders, analysts and security...
OWN-Defender
OWN-Defender — Windows Security Center COM リサーチ OWN-Defender は、Windows Security Center WSC がCOMインターフェースを通じてウイルス対策セキュリティ製品をどのように表現・管理するかを理解することに焦点を当てたWindowsセキュリティリサーチプロジェクトです。 このプロジェクトは、DefendNot が示す動作の調査として始まりましたが、既存の実装をブラックボックスとして扱うのではなく、独立したリバースエンジニアリングと検証の出発点として使用しました。...
mora-hwbp
Mora-HWBP — AMSI / WLDP / ETW Telemetry Hooking via Hardware Breakpoints A security-research Proof-of-Concept POC demonstrating hardware-breakpoint CPU debug register based function hooking as an alternative to traditional in-memory code patching. Purpose & Scope This repository is published...
CVE-2026-77899
Use after free in Windows Security Center allows an authorized attacker to elevate privileges locally...
EUVD-2026-73810
Use after free in Windows Security Health Service allows an authorized attacker to elevate privileges locally...
EUVD-2026-73291
Use after free in Windows Security Center allows an authorized attacker to elevate privileges locally...
CVE-2026-77899
CVE-2026-77899 is a use-after-free vulnerability in Windows Security Center that allows an authorized attacker to escalate privileges locally . The CVSS v3.1 score is 7.0 (HIGH) with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, reflecting the need for low privileges and high attack complexity...
