CVE-2025-24054-24071---Metasploit-Module

CVE-2025-24054/24071 - Metasploit Module Overview The vulnerability occurs during the extraction process of a .zip file. When interacting with a specially crafted .library-ms file, Windows Explorer processes the internal XML schema and automatically initiates an SMB authentication request to a...

CVE-2026-41089-PoC

CVE-2026-41089 — LongLogon crasher PoC Pre-authentication stack buffer overflow in the Netlogon service of Windows Server 2025. A single CLDAP packet UDP/389 from any host on the wire is enough: lsass.exe dies with STATUSSTACKBUFFEROVERRUN 0xc0000409 and the domain controller reboots. Component:...

PoC-CVE-2026-20841

PoC CVE-2026-20841 Description This project is a simple Proof of Concept PoC regarding Windows Notepad vulnerability about "remote code execution". Attackers have the ability to build a special .md file and by tricking users with Social Engineering skills into clicking the link within the .md fil...

CVE-2024-49112

LDAP Nightmare An exploit for CVE-2024-49112 reported by Yuki Chen @guhe120. A vulnerability in Windows Lightweight Directory Access Protocol LDAP. Created by SafeBreach Labs published on January 1st 2025. For the full technical analysis of the vulnerability and how we managed to exploit it check...

Detecting_blue_hammer_vuln

Detectingbluehammervuln Threat hunting query for bluehammer CVE windows CVE-2026-33825...

CVE-2026-30332

CVE-2026-30332 Description A Time-of-Check to Time-of-Use TOCTOU vulnerability was identified in Balena Etcher for Windows in versions prior to 2.1.4. The application creates a temporary .cmd file in a user writable directory and later executes it with elevated privileges via UAC. This allows an...

CVE-2021-40449-NtGdiResetDC-UAF

CVE-2021-40449-NtGdiResetDC-UAF A POC for CVE-2021-40449. Only tested on 1809, the code is a bit rough, but it's a good experience for me. Instead of using the ThreadName method, user-space memory allocation is used...

CVE-2021-1675

PrintNightmare Local Privilege Escalation PoC src/nightmare.cpp: source code to exploit CVE-2021-1675 and gain system access by installing a malicious dll src/payload-dll.cpp: source code for dll with malicious shellcode in entry function !!Only use against servers on which you have permission to...

CVE-2026-21508_POC

Proof-of-concept for CVE-2026-21508 For more information see: https://0xc4r.github.io/posts/CVE-2026-21508 Descrption: Proof-of-concept consist in a simple batch script and a DLL project: The DLL will be used to perform the DLL hijacking attack and will mainly perform the following actions when...

CVE-2026-24294

CVE-2026-24294 - Local NTLM Reflection LPE via SMB Arbitrary Port Local privilege escalation on Windows Server 2025 via NTLM reflection, abusing the SMB arbitrary port feature introduced in Windows 11 24H2 / Server 2025. Vulnerability Windows 11 24H2 / Server 2025 introduced an SMB client feature...

CVE-2026-24061

CVE-2026-24061 CVE-2026-24061 Telnet RCE Exploit For Linux MacOS Windows CVE-2026-24061 Telnet RCE 1.9.3 = GNU Inetutils = 2.7 Usage: go-telnet-exploit -p Check Exploit...

CVE-2026-41089

CVE-2026-41089 ██████╗██╗ ██╗███████╗ ██╗ ██╗ ██╗ ██████╗ ██████╗ ██╔════╝██║ ██║██╔════╝ ██║ ██║███║██╔═████╗██╔═████╗ ██║ ██║ ██║█████╗ ███████║╚██║██║██╔██║██║██╔██║ ██║ ╚██╗ ██╔╝██╔══╝ ██╔══██║ ██║████╔╝██║████╔╝██║ ╚██████╗ ╚████╔╝ ███████╗ ██║ ██║ ██║╚██████╔╝╚██████╔╝ ╚═════╝ ╚═══╝ ╚══════...

ShieldBreak

ShieldBreak - Windows Defender 0day vulnerability Microsoft has failed to properly patch the RoguePlanet vulnerability CVE-2026-50656, this PoC demonstrates a full patch bypass. The PoC was tested in the latest version of windows 11 25h2 +Canary channel and windows server 2025, the PoC also have ...

CVE-2021-1675-PrintNightmare-Analysis

Vulnerability Research: Local Privilege Escalation and RCE via Windows Print Spooler PrintNightmare / CVE-2021-1675 The repository contains a detailed technical report write-up and an analysis of the exploit concept for a critical vulnerability in the Windows Print Spooler service, which allows a...

0xGUARD

📄 Features Module remapping Thread filtering Module hiding Memory check Integrity check Anti-DLL Injection Anti-Debugging Process policy Literal string obfuscation Compatibility with Themida/VMProtect ✔️ Dependencies Windows 711 Visual Studio 2019 🔧 How to use 1. Set options in options.h and build...

printnightmare-detection-lab

PrintNightmare Threat Detection & Incident Response Lab CVE-2021-34527 📌 Overview This project documents an end-to-end security monitoring, detection engineering, and incident response implementation targeting PrintNightmare CVE-2021-34527. PrintNightmare is a critical vulnerability in the Window...

IconJector

IconJector This is a Windows Explorer DLL injection technique that uses the change icon dialog on Windows. It can trick users into loading a malicious DLL into their explorer process: https://github.com/0xda568/IconJector/assets/61665703/06428402-764c-4279-b762-1d01082552c8 Additionally, it can b...

RemoteMonologue

RemoteMonologue RemoteMonologue is a Windows credential harvesting technique that enables remote user compromise by leveraging the Interactive User RunAs key and coercing NTLM authentications via DCOM. Read X-Force Red's RemoteMonologue: Weaponizing DCOM for NTLM Authentication Coercions for...

Antignis

Antignis , , . . '..' / \ / ||| || '-, ,-' / /\ \ / \ \ |/ \ / | |/ / '. .:. .' / | \ | \ | | / // | \ |\ \ '|Y|' | /| /| |\ /|| // , \ / , / / // / / ,- I -, | /=\ | ,-' |=| '-, - / Link to blogpost:...

IoRingReadWritePrimitive

IoRingReadWritePrimitive Post exploitation technique to turn arbitrary kernel write / increment into full read/write primitive on Windows 11 22H2+ This PoC is using the HackSysExtremeVulnerableDriver. The PoC supports both arbitrary write and arbitrary increment, controlled through a flag passed...