Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2025-50165-x64-Exploit — Generates weaponized JPEG files exploiting CVE-2025-50165 (Windows Graphics RCE) with custom x64 shellcode, heap spray, ROP chain, and AV/EDR evasion for authorized penetration testing. | Kitploit
Tools/GitHubGitHub/encrypter15/cve-2025-50165-x64-exploit
Payload GenerationVulnerability AnalysisExploitationIDS/IPS EvasionShellcodeWeb Application ExploitationPenetration TestingBinary Exploitation

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
GitHub
encrypter15/cve-2025-50165-x64-exploit

CVE-2025-50165-x64-Exploit

Generates weaponized JPEG files exploiting CVE-2025-50165 (Windows Graphics RCE) with custom x64 shellcode, heap spray, ROP chain, and AV/EDR evasion for authorized penetration testing.

View Repository
7299 months agoNot yet reviewed
Share

CVE-2025-50165 Windows Graphics Component RCE (x64)

Critical Remote Code Execution via malicious JPEG – Windows 11 24H2 (unpatched)
CVSS 9.8 – No privileges, no interaction required

root@kitploit:~
CVE-2025-50165 - windowscodecs.dll untrusted pointer dereference
Discovered by Zscaler ThreatLabz
Patched: November 2025 (KB5040442)

Features

  • Full x64 null-free shellcode (calc.exe spawner – 169 bytes)
  • Heap spray + ROP chain inside APP1/EXIF segments
  • Polymorphic NOP sled + randomized lengths for AV/EDR evasion
  • Single Python file – no dependencies beyond Pillow

Files

root@kitploit:~
poc/                     → Final weaponized JPEGs
scripts/generate_poc.py  → Main generator (Encrypter15)
shellcode/calc_x64.bin   → Raw shellcode for analysis
README.md                → This file

Quick Start

root@kitploit:~
pip install Pillow
python scripts/generate_poc.py

→ Generates poc/CVE-2025-50165_x64_encrypter15.jpg

Open the JPEG with Photos, Office, Edge preview, etc. → calc.exe spawns instantly on vulnerable systems.

Legal

For authorized security testing and research only. Do not use against systems without explicit permission.

Author

Encrypter15 – [email protected]

Stay frosty.

Download Tool