CVE-2026-104660

Progressive Robot hMailServer versions 6.0.0 through 6.3.5 (Windows) are vulnerable to a missing authorization flaw in its COM objects. The service registers COM classes without DCOM access or launch permissions and fails to use a security descriptor during CoInitializeSecurity, allowing local in...

CVE-2022-30190

CVE-2022-30190 Follina A proof of concept PoC for CVE-2022-30190 Follina. Requirements Victim Windows 10 21H1 equivalent/earlier Security update KB5016616 uninstalled Attacker Microsoft .NET SDK Python 3.9 or later Configuration Edit config.xml to modify the attacker's server hostname and port...

CVE-2021-31955-POC

CVE-2021-31955 Windows Kernel Information Disclosure POC The exploit works on all 64-bit vulnerable targets. unpatched system patched system...

ZerologonWithImpacket-CVE2020-1472

Zerologon and Impacket Combination Exploit CVE-2020-1472 This repository contains an updated implementation 2024 of the Zerologon exploit combined with Impacket tools to exploit CVE-2020-1472 Zerologon. This exploit targets Windows Server environments to manipulate machine account passwords and...

Detours

Microsoft Research Detours Package Detours は、Windows 上で API 呼び出しを監視および計装するためのソフトウェアパッケージです。Detours は多くの ISV によって使用されており、Microsoft の製品チームでも使用されています。Detours は現在、標準的なオープンソースライセンス MIT の下で利用可能です。これにより、Detours を使用するプログラマーのライセンス手続きが簡素化され、コミュニティがオープンソースのツールとプロセスを使用して Detours をサポートできるようになります。 Detours は...

EvilWinRM-NG

EvilWinRM-NG Getting started To make it easy for you to get started with GitLab, here's a list of recommended next steps. Already a pro? Just edit this README.md and make it your own. Want to make it easy? Use the template at the bottom! Add your files Create or upload files Add files using the...

domi-owned

Domi-Owned Summary Domi-Owned is a tool used for compromising IBM/Lotus Domino servers. Tested on IBM/Lotus Domino 8.5.2, 8.5.3, 9.0.0, and 9.0.1 running on Windows and Linux. Requirements Domi-Owned uses Python 3, which can be install through your distribution's package manager apt, yum, etc...

CVE-2015-1578

CVE-2015-1578 Achat 0.150 beta7 - 원격 버퍼 오버플로우 재작성 python3, PNPT 과정용 원본: 작성자 KAhara MAnhara 재작성: python3, Giuseppe Aloisi Achat 0.150 beta7 - 버퍼 오버플로우 Windows 7 32bit에서 테스트됨 https://www.exploit-db.com/exploits/36025 스크립트가 리버스 셸을 제공하는 데 몇 초 정도 기다리십시오... 코드에서 msfvenom 명령어 실행 msfvenom -a x86 --platfo...

CVE-2021-31956-POC

" CVE-2021-31956" WIP PoC code for CVE-2021-31956 in preparation for OSEE. Will improve it further after my OSEE exams and free time. A lot of hardcoded offsets need to be changed if it is different on the target system but if it is anything similar to 2020 - 2021 builds then no change should be...

CVE-2014-4076

CVE-2014-4076 PoC This proof of concept directly copied from its original python version and rewritten in C++. Build This project is built with Visual Studio 2013 Update 4. Notice Only users that in Administrators group can open the device and perform IO controls, which means the exploit only...

CVE-2021-1675-PrintNightmare

CVE-2021-1675 - PrintNightmare LPE PowerShell Caleb Stewart | John Hammond | June 1, 2021 CVE-2021-1675 is a critical remote code execution and local privilege escalation vulnerability dubbed "PrintNightmare." Proof-of-concept exploits have been released Python, C++ for the remote code execution...

MS17-010

MS17-010 모든 연구가 이제 Metasploit 마스터 저장소에 있으므로, 여기에 두 가지 버전이 존재하여 혼란을 줄 이유가 없었고, 압도적인 인기 덕분에 지원이 악몽이 되었습니다. 이는 단순한 사이드 프로젝트이기 때문입니다. 여기에 지원 이슈를 올리지 마십시오. 답변되지 않습니다. 스캐너를 찾는 분들을 위해: Metasploit: https://www.rapid7.com/db/modules/auxiliary/scanner/smb/smbms17010 Python:...

SAMDump

SAMDump 볼륨 섀도 복사 서비스VSS를 사용하여 Windows SAM 및 SYSTEM 파일을 추출하며, 여러 유출 옵션과 XOR 난독화를 지원합니다: VSS를 사용하여 볼륨 섀도 복사본을 나열하고 필요한 경우 생성합니다 섀도 복사본에서 SAM 및 SYSTEM 파일을 추출합니다 파일 작업에 NT API 호출NtCreateFile , NtReadFile , NtWriteFile을 사용합니다 난독화를 위한 XOR 인코딩을 지원합니다 유출 방법: 로컬 저장 또는 네트워크 전송 C++, C, Crystal 및 Python으로...

BugChecker

BugChecker Introduction BugChecker is a SoftICE-like kernel and user debugger for Windows 11 and Windows XP as well: it supports Windows versions from XP to 11, both x86 and x64. BugChecker doesn't require a second machine to be connected to the system being debugged, like in the case of WinDbg a...

CVE-2020-13457

CVE-2020-13457 CVE-2020-13457 Timeline ================ 2020-05-04: Discovered 2020-05-11: Retest issues on researcher's ecosystem 2020-05-20: PoC exploit on windows 2012 x64 tested 2020-05-25: Vendor notification 2020-05-27: PoC exploit on windows 10 x64 tested 2020-06-01: Awaiting vendor...

Microsoft-CVE-2021-1675

Microsoft-CVE-2021-1675 I have created a small C project that exploits vulnerability CVE-2021-1675. For more information about CVE-2021-1675, please check my blog post: https://thalpius.com/2021/07/16/windows-print-spooler-elevation-of-privilege-vulnerability-cve-2021-1675-explained Usage Microso...

CVE-2025-30400

CVE-2025-30400 Concept: Windows DWM Use-After-Free UAF Project Overview This repository features the CVE-2025-30400 Concept , a Python program designed to illustrate the impact of a Use-After-Free UAF privilege escalation zero-day vulnerability , such as the one reported in Microsoft Windows...

kurasagi

kurasagi kurasagi は、Windows 24H2 - 25H2 向け PatchGuard バイパスの完全な POC です。 詳細については、バイパスを詳述した PDF 論文が含まれている product ブランチを参照してください。 CRITICALSTRUCTURECORRUPTION（PatchGuard）に関連する BSOD が発生した場合は、その BSOD について issue を作成してください！ 免責事項 1. 教育目的でのみ使用してください！ 2. 実行時にはハイパーバイザーベースのセキュリティ機能を有効にしないでください！（BSOD になります！） 3...

CVE-2023-23192

CVE-2023-23192 CVE-2023-23192- Userlock - Multi-Factor Authentication MFA Bypass Exploit Title: Userlock - Multi-Factor Authentication MFA Bypass Date: 01/11/2023 Exploit Author: Pinar Sadioglu Vendor Homepage: https://www.isdecisions.com/products/userlock/help/ Version: = 11.0.1.40 Tested on:...

CVE-2019-0859-1day-Exploit

CVE-2019-0859-1day-Exploit CVE-2019-0859 1day Exploit Target OS : Windows 7 x64 ServicePack1 7601 This exploit need to enviroment that is updated with 2019 March security update. Previous update didn't check currently. exploit relible isn't 100%. Sometime exploit didn't work perfecty. Then you tr...