
CVE-2026-60004-PoC
Gitea before 1.27.1 allows remote code execution via the diffpatch API through Git hook installation.
exploitationpenetration-testingpost-exploitation+5

Gitea before 1.27.1 allows remote code execution via the diffpatch API through Git hook installation.

Automated proof-of-concept exploit for CVE-2026-60004, a Gitea diffpatch Git hook RCE that plants a post-index-change hook to gain a reverse shell as…

Modern security products (CrowdStrike, Bitdefender, SentinelOne, etc.) hook the nLoadImage function inside clr.dll to intercept and scan in-memory…

Leverage WindowsApp createdump tool to obtain an lsass dump

Hardware breakpoint hooking engine for Windows that uses debug registers to hook functions, bypass ETW/AMSI, and evade user-land EDR monitoring.

exp for CVE-2019-0887

Hook PasswordChangeNotify