

Windows kernel driver experiment based on KasperskyHook that uses direct syscalls for interprocess memory copying, with support for unloading the…

Windows Exploit Suggester - Next Generation

PowerShell toolkit for AD CS auditing based on the PSPKI toolkit.

DCOM-based privilege escalation tool for Windows Server 2012-2022 and Windows 8-11, elevating users with ImpersonatePrivilege to NT AUTHORITY\SYSTEM…

Cobalt Strike AggressorScripts CVE-2020-0796

Nim-based proof-of-concept for CVE-2021-4034 (PwnKit), a local privilege escalation in polkit's pkexec, with embedded payload library for standalone…

POC for CVE-2020-10665 Docker Desktop Local Privilege Escalation


PowerShell script that automatically tests CMD bypass methods on Windows, evaluates results, calculates a security score, and provides hardening…

Builds a root exploit for vivo/iQOO devices targeting CVE-2026-43499, leveraging kernel techniques like KASLR bypass and CFI manipulation to achieve…

Multi-purpose proof-of-concept tool based on CPU-Z CVE-2017-15303

Kernel Arbitrary Read Vulnerability + Superfetch EOP based on reacher from https://starlabs.sg/blog/2022/06-trying-to-exploit-a-windows-kernel-arbitra…

Using CVE-2023-21768 to manual map kernel mode driver

A Bind Shell Using the Fax Service and a DLL Hijack

Kerberos Resource-Based Constrained Delegation Attack from Outside using Impacket

stack based buffer overflow in MsIo64.sys, Proof of Concept Local Privilege Escalation to nt authority/system

A tool uses the QoS Policy (Pacer.sys) to throttle Endpoint Detection and Response (EDR) agents from connecting to the server.