CVE-2024-43583-PoC

CVE-2024-43583 - Windows Privilege Escalation Exploit Author: No0B@ckSappi3 Instagram: No0BackSappi3 Overview CVE-2024-43583 is an elevation of privilege vulnerability affecting Microsoft's Winlogon component. Exploiting this flaw allows a low-privileged user to escalate their privileges to SYSTE...

Assignement_3-CVE-2017-7269

CVE-2017-7269 Name : Killian Munt-Buron and Naji Ullah Abbasi Description of the CVE CVE-2017-7269 is a buffer overflow vulnerability in Microsoft Windows Server 2003 R2. The vulnerability is in the ScStoragePathFromUrl function in the WebDAV. This vulnerability allows to execute arbitrary code v...

exch_CVE-2021-42321

exchCVE-2021-42321 This is the tool involved in the 7bits security team article "DotNet Security - CVE-2021-42321 Reproduction" Change the TypeConfuse chain to write to file, bypass Windows Defender to disable the w3wp.exe startup process. Overwrite the original ysoserial.net file with this file,...

CVE-2026-54984

CVE-2026-54984 Windows ICC file parsing out-of-bounds write — remote code execution Reported through the Zero Day Initiative as ZDI-CAN-30441 , published as ZDI-26-543 , fixed by Microsoft in the August 2026 update cycle. Hi, I'm Kağan Çapar. I reported this vulnerability to the Zero Day...

CVE-2024-38077-MadLicense-exploit

CVE-2024-38077 MadLicense - Complete Exploitation Framework 📚 Technical Documentation for Presentation This document explains each component of the framework, why it exists , and how the heap buffer overflow exploitation works in modern Windows. 🎯 What Is CVE-2024-38077? The Vulnerability Windows...

Chakra-CVE-2019-0567

Chakra-CVE-2019-0567 A POC of a type confusion bug in chakracore framework that leads to code execute. Following from Connor McGar's blog https://connormcgarr.github.io/ NOTE: The Offsets and ROP gadgets depends on the Windows version you use, so it might not work for you. If you compare my code ...

CVE-2024-21107

CVE-2024-21107 Oracle VM VirtualBox for Windows prior to 7.0.16 - Elevation of Privileges Description: A vulnerability has been identified in Oracle VM VirtualBox on Windows where the setup fails to set proper access rights for its installation folder if a non-default installation path was chosen...

CVE-2020-0668

CVE-2020-0668 PowerShell implementation, uses printconfig.dll to elevate privileges evil dll can be customized, the dll here will execute the c:\programdata\setup.bat file Reference: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0668...

CVE-2020-16947

CVE-2020-16947 This vulnerability occurs in Outlook 2019 16.0.13231.20262 installed on Windows 10 1909 x64 TLDR; I found this bug using winafl fuzzer. This bug occured when parsing html contents. if attacker successfully executes this exploit, it can lead to remote command execution. Details 0:00...

MSRPC-to-ATTACK

MSRPC-To-ATT&CK A repository that maps commonly used MSRPC protocols to Mitre ATT&CK while providing context around potential indicators of activity, prevention opportunities, and related RPC information. List of MSRPC Protcols: MS-SCMR: Service Control Manager Remote Protocol MS-SCMR.md MS-DRSR:...

Windows-Privilege-Escalation-Notes

Windows Privilege Escalation Preferable room is https://tryhackme.com/room/windows10privesc, but u can use anything of your choice. Some resources, https://www.absolomb.com/2018-01-26-Windows-Privilege-Escalation-Guide/...

rust_syscalls

RUSTSYSCALLS Stub singolo per syscall dirette e indirette con risoluzione runtime degli SSN per Windows. Caratteristiche: Una singola riga per tutte le tue syscall Hashing dei nomi delle funzioni in fase di compilazione Syscall dirette o indirette Supporto nativo per x8664, WOW64 e x86 Progettato...

memOptix

memOptix Questo notebook Jupyter è stato creato per assistere i professionisti DFIR nel triage dei dump di memoria Windows. Si prega di notare che questo notebook è stato creato sulla base dell'output generato dallo script Python Supermem di CrowdStrike https://github.com/CrowdStrike/SuperMem. La...

CVE-2024-4577-PHP-CGI-RCE

This is a YAML file written specifically for the php-CGI RCE vulnerability - High Risk Introduction php-CGI is an interface used by web servers to run PHP scripts. It connects the PHP interpreter to the web server through CGI Common Gateway Interface. Vulnerability Cause PHP ignored the Best-Fit...

Cronos

Cronos This project was co-authored by Description PoC for a new sleep obfuscation technique based on Ekko leveraging waitable timers to RC4 encrypt the current process and change the permissions from RW to RX to evade memory scanners. A more detailed explanation will be available in the blog pos...

ATP-PowerShell-Scripts

ATP-PowerShell-Scripts Microsoft Signed PowerShell scripts List of all the signed scripts available in C:\ProgramData\Microsoft\Windows Defender Advanced Threat Protection\DataCollection Accessing the file By default the files cannot be accessed. You need the TrustedInstaller privilege...

My-Presentation-Slides

My-Presentation-Slides Orange Tsai's public presentation slides. You can find me at: Blog: https://blog.orange.tw/ Mail: [email protected] Twitter: @orange8361 2024 WorstFit: Unveiling Hidden Transformers in Windows ANSI! Black Hat Europe DEVCORE CONF 2025 Confusion Attacks: Exploiting Hidde...

JuicyPotatoNG

JuicyPotatoNG Just another Windows Local Privilege Escalation from Service Account to System. Full details at -- https://decoder.cloud/2022/09/21/giving-juicypotato-a-second-chance-juicypotatong/ Usage JuicyPotatoNG by decoderit & splintercode Mandatory args: -t createprocess call:...

TickTock

TickTock This repository demonstrates a PoC memory scanner for enumerating timer-queue timers as used in Ekko Sleep Obfuscation: https://github.com/Cracked5pider/Ekko. For a full technical walkthrough please see the accompanying blog post here:...

PsyloDbg

PsyloDbg PsyloDbg is a fast-growing and user-friendly open-source Windows Debugger entirely coded in Delphi. The main goal of this project is to offer to Malware analysts another tool to short their response time during their analysis process. The project is still in very early stage, it is...