CVE20131491-JIT

========================= Title ========================================= CVE-2013-1491 PoC using JIT-Spray by Yuki Chen 古河 +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Twitter: @guhe120 Weibo: http://weibo.com/u/1874932054 ========================= About this PoC...

Zulu

Zulu - the interactive fuzzer Released as open source by NCC Group Plc - http://www.nccgroup.com/ Developed by Andy Davis, andy dot davis at nccgroup dot com https://www.github.com/nccgroup/Zulu Released under AGPL see LICENSE for more information Documentation see...

CVE-2019-5786

CVE-2019-5786 Chrome 72.0.3626.119 stable FileReader UaF exploit for Windows 7 x86. This exploit uses site-isolation to brute-force the vulnerability. iframe.html is the wrapper script that loads the exploit, contained in the other files, repeatedly into an iframe. host iframe.html on one site an...

DefCon25

Lab Setup 1. x2 VM's = Win7 x64 & Win10RS1/2 x64 2. Extract "DefCon-Tool.zip" to the root of the C drive 3. Follow slides and Lab-Writeup.txt...

cve-2016-0095-x64

cve-2016-0095-x64 windows 7 Ultimate Ultimate x64 poc of cve-2016-0095MS16-034 A newbie starts learning cve, referencing: https://whereisk0shl.top/ssctfpwn450windowskernelexploitationwriteup.html and the code from expert k0shl at https://github.com/k0keoyo/SSCTF-pwn450-ms16-034-writeup. Modified ...

bitcracker

BitCracker BitCracker is the first open source password cracking tool for storage devices Hard Disk, USB Pendrive, SD card, etc... encrypted with BitLocker, an encryption feature available on Windows Vista, 7, 8.1 and 10 Ultimate, Pro and Enterprise editions. BitLocker offers a number of differen...

bluekeep_metasploit_practice

bluekeepmetasploitpractice Exploiting bluekeep CVE-2019-0708 on windows 7 using metasplotable...

Ruby_Pricise_Heap_Spray

RubyPriciseHeapSpray Use ruby strings to do a precise heap spray in an win7 env ps. 0c0c0c0c you will have to adjust the last number of iterations on how many times u call the spray function. that's bc of how ruby works.... basically ruby decides to delete all heap allocs of certain sizes if for...

CVE-2019-0708

CVE-2019-0708 POC-CVE-2019-0708 Microsoft Windows 7 for 32-bit Systems SP1 Microsoft Windows 7 for x64-based Systems SP1 Microsoft Windows Server 2003 Microsoft Windows Server 2008 R2 for Itanium-based Systems SP1 Microsoft Windows Server 2008 R2 for x64-based Systems SP1 Microsoft Windows Server...

CVE-2016-0040

CVE-2016-0040 This exploit builds upon SMMRootkit's 32Bit project https://github.com/Rootkitsmm/cve-2016-0040 which causes this vulnerability to trigger a BSoD with all 'a's in RCX and 'B's in RAX. It was ported to 64Bit Windows 7 SP1 and doesn't use the "mov rcx+06h, rax" instruction for inital...

CVE-2017-0213

CVE-2017-0213: Windows COM Elevation of Privilege Vulnerability Description Author: Google Security Research CVE: 2017-0213 EDB-ID: 42020 References: Project-Zero Microsoft Exploit-Database Video: Youtube Affected Products Product| Version| Update| Build| Tested ---|---|---|---|--- Windows 10|...

CVE-2015-1578

CVE-2015-1578 Achat 0.150 beta7 - Remote Buffer Overflow Rewrite for python3 for the PNPT course. Original: Author KAhara MAnhara Rewritten: in python3 by Giuseppe Aloisi Achat 0.150 beta7 - Buffer Overflow Tested on Windows 7 32bit https://www.exploit-db.com/exploits/36025 give the script a few...

CVE-2016-0051

Proof-of-concept BSoD Blue Screen of Death and Elevation of Privilege to SYSTEM code for my CVE-2016-0051 MS-016. vulnerabilty poc auhor: koczkatamas https://twitter.com/koczkatamas Original code: https://github.com/koczkatamas/CVE-2016-0051 Thanks to koczkatamas this PoC will run from CMD and th...

WIndows-7-automated-exploitation-using-metasploit-framework-

This repository does not have a README...

cve-2019-0708-exp

cve-2019-0708-exp Exp. from Korea. I think you'll like itXP is coming. Win7 is coming too. Will Linux be far away?...

Perfusion

Perfusion On Windows 7 , Windows Server 2008R2 , Windows 8 , and Windows Server 2012 , the registry key of the RpcEptMapper and DnsCache 7/2008R2 only services is configured with weak permissions. Any local user can create a Performance subkey and then leverage the Windows Performance Counters to...

Exploit-CVE-2014-4113

Exploit-CVE-2014-4113 CVE-2014-4113 is a Local & Privilege Escalation Exploits. You can get the SYSTEM Privilege. support platform: x86; windows xp and windowx 7 usage: 1. cmd.exeлǰĿ¼ִ cve-2014-4113.exe target program name for example: cve-2014-4113.exe calc.exe...

Etern-blue-Windows-7-Checker

Eternalblue SMB1 Windows7/10 checker Updated and now detects Windows 7 and as well as old version Windows 10 that supports SMB 1. I only implemented smb 1 and any smb 2 server you try this on will return a "not vulnerabile". I researched on how the structure of a SMB1 packet and how to constructe...

CVE-2012-1876-win7_x86_and_win7x64

This repository does not have a README...

Juicy-Potato-x86

Juicy-Potato-x86 Juicy Potato for x86 Windows This is a version of ohpe's Juicy Potato privilege escalation exploit modified for x86 Windows. I preserved as much of the code as I could, while making small changes necessary to compile for x86 Windows. Tested successfully on Windows 7 SP1 x86 Build...