CVE-2016-3238-PoC

CVE-2016-3238-PoC Whitepaper for CVE-2016-3238/MS16-087 Proof Of concept. CVE-2016-3238 allows man-in-the-middle attackers to execute arbitrary code by providing a crafted print driver during printer installation, aka "Windows Print Spooler Remote Code Execution Vulnerability."...

CVE-2024-3116_RCE_in_pgadmin_8.4

CVE-2024-3116RCEinpgadmin8.4 Creando un laboratorio y probando la CVE-2024-3116, una ejecución remota de código en pgadmin 8.4 pip descargar el archivo .whl 8. Instalar pgadmin4: python -m pip install C:\Users\User\Downloads\pgadmin4-8.4-py3-none-any.whl Carpeta de instalación:...

CrackMapExecWin

CrackMapExecWin Description The great CrackMapExec tool compiled for Windows Features Latest 2.2 version Compiled for x86 so should work on x86 and x64 platforms Usage 1. Download the whole archive 2. Extract it and run crackmapexec.exe 3. Profit Older versions Browse the release section to find...

Patch-the-Path-CVE-2025-55234-Detection-Defense

Patch-the-Path-CVE-2025-55234-Detection-Defense Este playbook describe las estrategias de detección, contención y remediación para CVE-2025-55234, una falla crítica de escalada de privilegios en Windows SMB. Por Mark Mallia Introducción En el panorama actual de ciberriesgo en constante cambio, la...

CVE-2025-9074

CVE-2025-9074 – Escape total de Docker en Docker Desktop para Windows y macOS 📌 Descripción Docker Desktop expone la API interna del motor de Docker en http://192.168.65.7:2375 a cualquier contenedor en ejecución — sin autenticación ni control de acceso. Dado que el motor puede montar el sistema ...

SandboxBootkit

SandboxBootkit Bootkit tested on Windows Sandbox to patch ntoskrnl.exe and disable DSE/PatchGuard. There is a blog post going into more detail about the implementation. Getting started Download the latest release and extract the archive Run Installer.exe Start Windows Sandbox Note : parts of the...

Get-log4j-Windows.ps1

Get-log4j-Windows.ps1 Identify all log4j components across all windows servers, entire domain, can be multi domain. CVE-2021-44228 Will scale to 1,000+ windows servers, 250+ servers at a time. 1k servers took about 1 1/2 hours. Apache log4j CVE-2021-44228 Single Server Version: Single Server...

deception-as-detection

Engaño como Detección Técnicas de detección basadas en engaño mapeadas a las Tácticas, Técnicas y Conocimiento Común Adversarial de MITRE ATT&CK™: Matriz de Técnicas de Windows Matriz de Técnicas de Linux Matriz de Técnicas de Mac 📔 Historias de Engaño Se ha creado una historia de engaño de muest...

CVE-2026-107578

Progressive Robot hMailServer versions 6.3.4 and 6.3.5 are vulnerable to local privilege escalation due to improper link resolution and external control of file paths in the hMailServer.exe administrative command-line operations. On Windows , a local attacker controlling the low-privilege service...

EUVD-2026-94860

Improper link resolution and external control of file paths in the administrative command-line operations of hMailServer.exe in Progressive Robot hMailServer 6.3.4 and 6.3.5 allow a local attacker who already runs code as the low-privilege service account to escalate privilege. On Windows,...

CVE-2026-107578 Improper Link Resolution Before File Access ('Link Following') in hMailServer

Improper link resolution and external control of file paths in the administrative command-line operations of hMailServer.exe in Progressive Robot hMailServer 6.3.4 and 6.3.5 allow a local attacker who already runs code as the low-privilege service account to escalate privilege. On Windows,...

CVE-2026-107573 Incorrect Default Permissions in hMailServer

Incorrect default permissions in the Windows installer of Progressive Robot hMailServer 6.0.0 through 6.3.5 allow a local authenticated user to read the mail server's data. The installer created the data, log, temp, database and event folders and the hMailServer.INI configuration file with the...

EUVD-2026-94855

Incorrect default permissions in the Windows installer of Progressive Robot hMailServer 6.0.0 through 6.3.5 allow a local authenticated user to read the mail server's data. The installer created the data, log, temp, database and event folders and the hMailServer.INI configuration file with the...

CVE-2024-30088-Windows-poc

CVE-2024-30088-Windows-poc La vulnerabilidad reside en la función NtQueryInformationToken, particularmente al procesar la función AuthzBasepCopyoutInternalSecurityAttributes. Este fallo se origina en una gestión inadecuada de los mecanismos de bloqueo por parte del kernel al operar sobre objetos,...

icebox

IceBox Icebox is a Virtual Machine Introspection solution that enable you to stealthily trace and debug any process kernel or user. It's based on project Winbagility. Files which might be helpful: INSTALL.md: how to install icebox. BUILD.md: how to build icebox. Demo Project Organisation fdp: Fas...

CVE-2024-21413

CVE-2024-21413 Obtaining Login Credentials Using CVE-2024-21413 Vulnerability First of all, hello. Using a vulnerability in Microsoft Outlook, you can perform the following steps to obtain Windows user credentials. I use the class.phpmailer.php library via PHP to send the email. You need to open...

PenCrawLer

PenCrawLer Un rastreador web avanzado y DirBuster PeNCrawLer es un rastreador web y dirbuster avanzado diseñado para su uso en pruebas de penetración basadas en el sistema operativo Windows. Para leer más sobre las características, consulta la wiki: https://github.com/TheM4hd1/PenCrawLer/wiki...

DetectionLabELK

DetectionLabELK DetectionLabELK es un fork del DetectionLab de Chris Long con la pila ELK en lugar de Splunk. Descripción: DetectionLabELK es el laboratorio perfecto si deseas construir capacidades de detección efectivas. Ha sido diseñado pensando en los defensores. Su propósito principal es...

CVE-2022-34715-POC

CVE-2022-34715-POC CVE-2022-34715-POC pcap nfssvr.sys versión 10.0.20348.825 0: kd r rax=0000000080000001 rbx=0000000000000000 rcx=ffffde87fe461150 rdx=0000000000000000 rsi=fffff8040811aa50 rdi=0000000000000008 rip=fffff80408067dbb rsp=ffffb400eb3e2630 rbp=ffffb400eb3e26b9 r8=0000001000000020...

rdpy

RDPY Remote Desktop Protocol in twisted python. RDPY is a pure Python implementation of the Microsoft RDP Remote Desktop Protocol protocol client and server side. RDPY is built over the event driven network engine Twisted. RDPY support standard RDP security layer, RDP over SSL and NLA...