CVE-2026-49176_LPE_POC

CVE-2026-49176 SYSTEM Shell PoC Local privilege-escalation proof of concept for the Windows WalletService vulnerability fixed in July 2026. Technical write-up: CVE-2026-49176 Exploit Development: WalletService to SYSTEM. A standard user creates a Wallet ESE database containing a persisted callbac...

CVE-2023-38146-Poc

PoC for the ThemeBleed CVE-2023-38146 exploit Windows 11 Themes Heavily inspired by https://github.com/gabe-k/themebleed which only runs on windows the reason why i decided to write this. Used modified code from the impacket smbserver.py...

Windows-11-24h2-Kernel-Exploit

Windows-11-24h2-Kernel-Exploit Windows 11 24h2 LPE Kernel Exploitation. CVE-2020-12446eneio64.sys...

CVE-2026-62737

CVE-2026-62737 — ExecutionContext.sys Arbitrary Kernel Call Proof of concept for CVE-2026-62737: ExecutionContext.sys invokes a user-controlled TaskFn pointer in kernel mode without validation, producing a controlled kernel crash. Validated on stock Windows 11 25H2 build 26200.8655, ARM64: 0x7E...

CVE-2023-38146

PoC for the ThemeBleed CVE-2023-38146 exploit Windows 11 Themes Heavily inspired by https://github.com/gabe-k/themebleed which only runs on windows the reason why i decided to write this. Used modified code from the impacket smbserver.py...

CVE-2026-34344

CVE-2026-34344 Information This vulnerability was originally discovered by @angelboy. I reproduced the vulnerability independently for educational and case-study purposes. Microsoft update detail: CVE-2026-34344 PoC has demonstrate crash by Type Confusion vulnerability. However, I don't have any...

bitpixie

bitpixie Full blog post here Main References syss blog post Syss's Github repository Bitpixie BitLocker Exploit Implementation Virtual machine reproduction. The local machine attacker machine uses Ubuntu 22.04.5 LTS system, while the victim machines are Windows 10 21H2 19041.1 and Windows 11 21H2...

bitlocker-hardening

🔐 yellowkey-mitigation BitLocker TPM+PIN Hardening Against CVE-2026-45585 YellowKey Automated mitigation for the WinRE BitLocker bypass — no full patch available yet 🔍 The Vulnerability YellowKey is a publicly disclosed BitLocker bypass that gives an attacker with physical access an unrestricted...

CVE-2026-50416-writeup-and-poc

CVE-2026-50416: One QWORD Too Many in the Desktop Heap On Windows 11 Insider build 10.0.28020.2149, the user mode mapping of the Win32k desktop heap exposed a raw kernel session pool pointer at offset 0x100. The read itself is almost offensively small: ULONG64 leaked = ULONG64 desktopheap + 0x100...

ThemeBleedPy

A huge thanks to gabek for the initial PoC in C, and actually finding this CVE, this is a remake of his code in python, reusing his stage files. To see the initial PoC view his page for it here: https://github.com/gabe-k/themebleed ThemeBleedPy A proof of concept using python for the CVE-2023-381...

CVE-2020-17103

🛡️ MiniPlasma - CVE-2020-17103 A Windows Local Privilege Escalation Zero-Day Turning placeholder files into SYSTEM access 📋 Overview MiniPlasma is a powerful local privilege escalation exploit targeting CVE-2020-17103 in the Windows Cloud Files Mini Filter Driver cldflt.sys. It allows any standard...

CVE-2026-40369

🚨 CVE-2026-40369 - Windows Kernel Elevation of Privilege Vulnerability Windows Kernel Heap-Based Buffer Overflow allowing local attackers to elevate privileges toNT AUTHORITY\SYSTEM. 📖 Overview CVE-2026-40369 is a High Severity privilege escalation vulnerability affecting Microsoft Windows Kernel...

cve-2023-36802

PoC for CVE-2023-36802 Exploit targeting MSKSSRV.SYS driver. The complete exploit works on vulnerable Windows 11 & 10 systems. Note If you have any cool tricks & tips that will make this exploit better I'm open to any suggestions : Credits Valentina Palmiotti @chompie1337 from IBM X Force Google'...

YellowKey-BitLocker-CVE-2026-45585

YellowKey BitLocker YellowKey BitLocker backs up BitLocker recovery keys and audits CVE-2026-45585 on Windows 10/11. yellowkey github search lands here. Portable CLI + GUI for volumes you administer. What's new in v2.2 September 27, 2026 Faster volume enumeration CSV/JSON/XML export encoding fix...

Lenovo-CVE-2025-8061

Lenovo-CVE-2025-8061 PoC for popping a system shell against the LnvMSRIO.sys 3.1.0.36 driver. All credits go to the original author Luis Casvella from Quarkslab. This works against latest Windows 11 Version 24H2 with KVAShadowing and Core Isolation disabled! !NOTE This was compiled using latest...

CVE-2024-30051

CVE-2024-30051 — Windows DWM Heap Overflow EoP · Master's Thesis Research -orange Heap-based Buffer Overflow in Windows Desktop Window Manager dwmcore.dll Local Privilege Escalation → Integrity Level SYSTEM via DWM process Build target: Windows 11 22H2 10.0.22621.3447 · Patch: KB5037771 Descripti...

RRAS-VULNERABILITY-CVE-2026-25172-CVE-2026-25173-CVE-2026--26111

Windows 11 RRAS Vulnerability Simulation Lab CVE-2026-25172, CVE-2026-25173, CVE-2026-26111 ⚠️ IMPORTANT – Educational & Defensive Use Only This guide is for setting up an isolated, controlled lab environment to understand integer overflow vulnerabilities in the Windows Routing and Remote Access...

CVE-2026-50656-rogueplanet-validation

RoguePlanet PoC Validation Report for Microsoft Defender Purpose and scope of the report This report concerns the validation of the publicly described RoguePlanet PoC related to Microsoft Defender. The described technique was presented in the media on 10 June 2026 as a Local Privilege Escalation...

CVE-2022-24521

CVE-2022-24521 CVE-2022-24521 PoC win10 21h2 19044.1620 win11 21h2 22000.593 Compilation Basic Information Windows SDK Version: 10.0 latest installed version Platform Toolset: Visual Studio 2022 v143 C++ Language Standard: Default ISO C++14 Standard...

CVE-2022-24481

CVE-2022-24481 win1021H219044.1620 win1121H222000.593 Basic Compile Information Windows SDK Version: 10.0 latest installed version Platform Toolset: Visual Studio 2022 v143 C++ Language Standard: Default ISO C++14 Standard...