DanderSpritz_lab

DanderSpritz Lab Purpose The goal of DanderSpritz lab is to allow researchers and defenders to quickly stand up a fully functional version of DanderSpritz - The Equation Group's Post exploitation tool-set and a Windows Server 2008 Domain and client as targets. The Windows target have some reverse...

ms09-050-CVE-2009-3103-exploit

Wrapper do Exploit MS09-050 SMBv2 Configuração em uma linha para exploração do MS09-050 CVE-2009-3103. Sem complicação, sem depuração, simplesmente funciona. Por quê? A maioria dos scripts MS09-050 por aí exige injeção manual de shellcode, tem problemas de temporização com handlers, ou simplesmen...

Explotacion-RCE-Pentesting-BlueKeep-CVE-2019-0708-

Explotación de Vulnerabilidad BlueKeep CVE-2019-0708 en Entorno Controlado Proyecto académico enfocado en el análisis, ejecución y resolución de problemas durante la explotación de la vulnerabilidad BlueKeep CVE-2019-0708 en el servicio RDP de Windows Server 2008 R2, desarrollado para la asignatu...

CVE-2020-0796

CVE-2020-0796 Vulnerabilidade RCE SMBv3 no SMBv3 windows 10 é vulnerável Windows 2008 Não vulnerável Script de detecção...

KB5061195: Windows Server 2008 R2 OOB Security Update (May 2025) (CVE-2025-32709)

The remote Windows host is missing a security update and is therefore affected by an elevation of privilege vulnerability: - Null pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. CVE-2025-32709 Note that Nessus has n...

KB5061197: Windows Server 2008 OOB Security Update (May 2025) (CVE-2025-32709)

The remote Windows host is missing a security update and is therefore affected by an elevation of privilege vulnerability: - Null pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. CVE-2025-32709 Note that Nessus has n...

comp5003-sweeny-pentest

COMP5003: Sweeny Barbers Penetration Test Full ethical hackin...

January 13, 2026—KB5073697 (Monthly Rollup)

None None...

January 13, 2026—KB5073700 (Security-only update)

None None...

Microsoft Windows Local Security Authority Subsystem Service 代码问题漏洞

The Microsoft Windows Local Security Authority Subsystem Service is an internal Microsoft program that runs Windows system security policies. It authenticates users when they log on to a computer standalone or server, manages user password changes, and generates access characters. It also leaves...

Microsoft HTTP.sys 访问控制错误漏洞

Microsoft HTTP.sys is an HTTP application protocol from Microsoft Corporation USA. An access control error vulnerability exists in Microsoft HTTP.sys. An attacker could exploit the vulnerability to elevate privileges. The following products and versions are affected:Windows 10 Version 21H2 for...

Microsoft Windows Network Driver Interface Specification 缓冲区错误漏洞

The Microsoft Windows Network Driver Interface Specification is one of the core components of a Windows network architecture from Microsoft Corporation. A buffer error vulnerability exists in the Microsoft Windows Network Driver Interface Specification. An attacker could exploit this vulnerabilit...

December 18, 2025—KB5074979 (Monthly Rollup) Out-of-band

None None...

December 9, 2025—KB5071507 (Security-only update)

None None...

December 9, 2025—KB5071504 (Monthly Rollup)

None None...

December 9, 2025—KB5071501 (Monthly Rollup)

None None...

December 9, 2025—KB5071506 (Security-only update)

None None...

November 11, 2025—KB5068909 (Security-only update)

None None...

November 11, 2025—KB5068906 (Monthly Rollup)

None None...

KB5068909: Windows Server 2008 Security Update (November 2025)

The remote Windows host is missing security update 5068909. It is, therefore, affected by multiple vulnerabilities - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. CVE-2025-60724, CVE-2025-60715,...