Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2026-21533_Scanner.py — Detector de CVE-2026-21533: escalada de privilegios a SYSTEM en Servicios de Escritorio Remoto (RDS) de Windows. | Kitploit
Tools/GitHubGitHub/fevar54/cve-2026-21533_scanner.py
Vulnerability ScannersExploitationPenetration TestingLearning & EducationCurated Resources
GitHubfevar54/cve-2026-21533_scanner.py

CVE-2026-21533_Scanner.py

Detector de CVE-2026-21533: escalada de privilegios a SYSTEM en Servicios de Escritorio Remoto (RDS) de Windows.

View Repository
25 months agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2026-21533 Scanner: Windows RDP Local Privilege Escalation Detection Tool

Status: In development

This repository contains a detection tool for the CVE-2026-21533 vulnerability, a privilege management flaw in Windows Remote Desktop Services (RDS) that could allow a local attacker to elevate their privileges to SYSTEM.

IMPORTANT: This script is an educational and detection Proof of Concept (PoC). Its purpose is to help system administrators and security teams (blue team) quickly identify potentially vulnerable systems on their network. It is NOT an exploit and does not contain code that performs privilege escalation.

Vulnerability Context (CVE-2026-21533)

  • Description: Incorrect privilege management in Windows Remote Desktop Services.
  • Impact: An attacker with valid credentials and local access to a system could exploit this flaw to elevate their privileges and gain full administrative control (NT AUTHORITY\SYSTEM).
  • CVSSv3 Severity: 7.8 (HIGH) - AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
  • Affected Systems: Multiple versions of Windows 10, Windows 11, and Windows Server (see the CPEs in the NVD advisory for the full list).
  • Mitigation: Apply the security patch provided by Microsoft (February 2026 update, with specific KB) and follow CISA guidelines.

    • What does this tool do?

    The CVE-2026-21533_Scanner.py script performs two main checks on the local system to assess risk:

    1. Patch Check (KB...): Verifies whether the security update that mitigates CVE-2026-21533 is installed on the system.
    2. Registry Permissions Check: Attempts to write and delete a test value in the Remote Desktop Services registry key (HKLM\SYSTEM\CurrentControlSet\Services\TermService). If the operation succeeds with limited user permissions, it indicates that the permission configuration is weak and the system could be vulnerable to the vector described in the CVE.

    Requirements

    • Operating System: Windows (the tool is designed to run locally on the system being assessed).
    • Permissions: Must be run with a standard user account (without administrator privileges) for the registry test to be valid.
    • PowerShell: Required for the patch check (optional; if it fails, the tool will continue).

    Installation and Usage

    1. Clone this repository or download the CVE-2026-21533_Scanner.py file.

    2. Open a terminal (CMD or PowerShell) in the folder where the script is located.

    3. Run the script with Python 3:

      root@kitploit:~
      python CVE-2026-21533_Scanner.py
    Download Tool