CVE-2020-0796

CVE-2020-0796 Overview: The compression feature added to SMBv3 starting from Windows 10/Server version 1903 contains an integer overflow vulnerability confirmed by Microsoft on 12/03/2020. It allows an attacker to perform Local Privilege Escalation LPE and Remote Code Execution RCE. Here we will...

RegPwn

RegPwn ブログ記事用エクスプロイト - https://www.mdsec.co.uk/2026/03/rip-regpwn/ Windows クライアントおよびサーバー向け LPE エクスプロイトコード テスト済みバージョン: Windows 11 25h2 Windows 11 24h2 Windows 10 21h2 Windows Servers 2016/2019/2022 CVE-2026-24291 として追跡 作者 : Filip Dragovic...

LazySign

LazySign Create fake certs for binaries using windows binaries and the power of bat files Over the years, several cool tools have been released that are capeable of stealing or forging fake signatures for binary files. All of these tools however, have additional dependencies which require...

etl-parser

etl-parser 순수 Python으로 작성된 이벤트 추적 로그ETL 파일 리더 etl-parser는 ETL Windows 로그 파일을 위한 순수 Python 3 파서 라이브러리입니다. ETL은 ETW의 기본 형식이자 커널 로거의 기본 형식입니다. etl-parser는 시스템 종속성이 없으며 Windows와 Linux 모두에서 잘 동작합니다. 이 형식은 문서화되어 있지 않기 때문에 Geoff Chappel의 블로그 정보와 Airbus CERT 팀의 리버스 엔지니어링 활동을 결합했습니다. ETL이란 무엇이며 왜 다루기 어려운가...

TeleShadow2

TeleShadow 2 Teleshadow2- Advanced Telegram Desktop Session Hijacker! Stealing desktop telegrams has never been so easy ! Set the email and sender details of the sender and recipient or use Telegram API! and send it to the victim after compiling. How do I use the session file? Delete everything...

CVE-2019-0708-EXP-Windows

CVE-2019-0708-EXP-Windows-Version Disclaimer The author's PoC is for research purposes only. If readers use this PoC for other activities, the author is not responsible. Table of Contents toc Introduction CVE-2019-0708-EXP-Windows version runs as a single executable file, no need for Linux, Pytho...

MsfMania

MsfMania MsfMania is an advanced Python-based payload obfuscation framework designed to evade EDR/AV detection on Windows systems. It generates highly polymorphic executables through dynamic code generation, multi-layer encryption RC4, and binary metadata spoofing. ⚠️ Educational Purpose Only -...

ddoor

ddoor cross platform backdoor using dns txt records What is ddor? ddor is a cross platform light weight backdoor that uses txt records to execute commands on infected machines. Features Allows a single txt record to have seperate commands for both linux and windows machines List of around 10 publ...

CVE-2023-21716

CVE-2023-21716 RTF Crash POC Python 3.11 Windows 10...

CVE-2023-28229

CVE-2023-28229 Windows CNG KeyIso RPC EoP/SBX Discovered by: @k0shl Reference: https://whereisk0shl.top/post/isolate-me-from-sandbox-explore-elevation-of-privilege-of-cng-key-isolation If compilation fails, rename rpc.h to something else because I didn't realise rpc.h is a standard include in...

Citrix_Secure_Access_LPE_0DAY

Citric Secure Access 로컬 권한 상승 Citrix Secure Access Windows 클라이언트에서 로컬 권한 상승 취약점을 발견했습니다. 이 취약점으로 인해 권한 있는 관리자가 악성 페이로드를 주입하여 NT Authority 권한을 획득할 수 있습니다. 영향을 받는 Citrix Secure Access 버전은 23.1.1.11 이상입니다. 참고용으로 아래에서 개념 증명PoC을 확인하시기 바랍니다:...

Security Bulletin: Security vulnerability affects the Windows GIM component as part of IBM Guardium Data Protection (CVE-2026-84891)

Summary Security vulnerability has been addressed in the Windows GIM component as part of IBM Guardium Data Protection Vulnerability Details CVEID:CVE-2026-84891 DESCRIPTION: IBM Guardium Data Protection could allow a remote attacker to obtain sensitive information due to use of hard-coded...

wifi-passview

WiFi Passview WiFi Passview 는 오픈 소스 배치 스크립트 기반 프로그램으로, WiFi 비밀번호를 몇 초 만에 쉽게 복구할 수 있습니다. 이 프로그램은 Windows OS 전용입니다. 기본적으로 이 스크립트 프로그램은 webpassview나 mailpassview와 같은 다른 패스뷰 소프트웨어와 동일한 기능을 합니다. 면책 조항 : WiFi Passview는 악의적인 목적으로 설계되지 않았습니다! 이 프로그램을 책임감 있게 사용해 주십시오! 💖 Featured By 이 프로젝트는 여러 유명 사이버보안 웹사이...

frida-extract

FridaExtract FridaExtract is a Frida.re based RunPE extraction tool. RunPE type injection is a common technique used by malware to hide code within another process. It also happens to be the final stage in a lot of packers : NOTE: Frida now also supports extraction of injected PE files using the...

CVE-2021-43326_Exploit

CVE-2021-43326 Exploit Automox Windows Agent Privilege Escalation Exploit Lacework Labs Blog Post https://www.lacework.com/blog/cve-2021-43326/ Automox Community Post...

Fiber

Description A fiber is a unit of execution that must be manually scheduled by the application rather than rely on the priority-based scheduling mechanism built into Windows. Fibers are often called lightweight threads. For more detailed information about what are and how fibers work consult the...

CVE-2026-50369

CVE-2026-50369 针对 Windows Server 2025 RDS 会话主机上 rdpcorets.dll!CRdpPipeGfxPlugin::Enable 中 TOCTOU 竞态条件的复现程序。 我将其报告为 DoS；该代码路径似乎还以某种方式启用了 EoP。 此复现程序仅是 DoS 路径的 PoC。 漏洞 Enable 在 this+0x60 处两次读取 COM 接口指针，且未进行同步。TerminateInstance 在其自身临界区范围之外清除同一字段。两者通过 PnP 设备到达和移除工作项在 NT 线程池上并发执行。第二次读取解引用空指针 → 访问冲突 →...

CVE-2026-92680

CVE-2026-92680 Proof of Concept Araxis Merge for Windows stores server credentials with DPAPI with pOptionalEntropy set to NULL. This allows any code running in the same user context to decrypt them. Full writeup: https://grepstrength.com/research/araxis-merge | ---|--- CVE| CVE-2026-92680 CWE|...

CVE-2024-21338

CVE-2024-21338 Local Privilege Escalation from Admin to Kernel vulnerability on Windows 10 and Windows 11 operating systems with HVCI enabled. Compiling Use Microsoft Visual Studio with the C++ package to successfully compile the PoC on both Release and Debug modes. Post Original blog post:...

CVE-2024-31771

CVE-2024-31771 TotalAV 임의 파일 쓰기 TotalAV 버전 6.0.x https://github.com/restdone/CVE-2024-31771/assets/42227817/ffe0c2ec-4ea6-4c29-852f-456b2e62f5b1 타임라인: 2024년 2월 13일: 6.0.740 취약점 발견 및 TotalAV에 보고. 2024년 2월 15일: TotalAV가 문제를 확인하고 재현함. 2024년 2월 19일: TotalAV가 다른 공급업체와 협력 중이었음. 해당 공급업체가 작업 중이라고 조언함...