CVE-85884 POC
☆37Oct 13, 2026Updated 3 weeks ago
Alternatives and similar repositories for CVE-2026-85884
Users that are interested in CVE-2026-85884 are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆46Oct 14, 2026Updated 3 weeks ago
- CVE-2026-97798 Windows Error Reporting - Command Injection TO SYSTEM☆63Oct 30, 2026Updated last week
- CVE-2026-50343 InstallService StaticPluginMap EoP - standard user to SYSTEM☆48Jul 16, 2026Updated 3 months ago
- Powershell & Javascript Obfuscator☆50Aug 24, 2026Updated 2 months ago
- A PoC tool for the Pass-ta-key Golden Attack, covering the extraction of the Google Password Manager Security Domain Secret from Chrome p…☆35Updated this week
- End-to-end encrypted cloud storage - Proton Drive • AdSpecial offer: 40% Off Yearly / 80% Off First Month. Protect your most important files, photos, and documents from prying eyes.
- This repository documents the VectorFreed RCE chain and includes a PoC for CVE-2026-96889.☆21Updated this week
- Custom Windows Driver that let you have an access to the NT Native Paths☆22Oct 25, 2026Updated last week
- Windows AppResolver LPE PoC with a filtered-admin-to-SYSTEM demonstration☆15Jul 17, 2026Updated 3 months ago
- ADSIsearch is a Beacon Object File (BOF) to query Active Directory using ADDS, ADSI, and Network Management WinAPIs.☆10Feb 23, 2025Updated last year
- Heap OOB write in MariaDB JSON_SCHEMA_VALID() → persistent privilege escalation (lab-assisted)☆16May 6, 2026Updated 6 months ago
- ☆16Jun 27, 2025Updated last year
- LPE Proof-of-Concept for Windows 11 abusing TrustedInstaller's Component Based Servicing (CBS) session COM object and junctions for arbit…☆60Updated this week
- BOF and research notes from hunting execution paths, covering Shell.HWEventHandlerShellExecute COM execution through the AutoPlay IHWEven…☆39Jun 20, 2026Updated 4 months ago
- Pull-based C2 framework with ten native transports, concurrent multi-profile handlers, and end-to-end ECDSA-signed tasking. Single Go bin…☆34Updated this week
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- ☆23Jul 6, 2026Updated 4 months ago
- Proof of concept exploit for CVE-2026-3775/CVE-2026-3780 and CVE-2026-57239 which lets you obtain NT AUTHORITY\SYSTEM rights via the Foxi…☆17Jul 27, 2026Updated 3 months ago
- example use of defining your own injection technique for explicit injection and or spawn (fork & run)☆19Jan 3, 2026Updated 10 months ago
- A simple rpc2socks alternative in pure Go.☆31Jul 8, 2024Updated 2 years ago
- Another new coercion primitive with LPE - machine-account NTLM coercion from a non-admin user via Windows Store InstallService plugin res…☆89Jun 20, 2026Updated 4 months ago
- CVE-2026-36425 OPSWAT AppRemover (ardrv.sys) improper access control advisory☆30Jul 17, 2026Updated 3 months ago
- php2shell WordPress RCE proof of concept (PHP 8.3.35 / WordPress 7.1.2)☆35Oct 23, 2026Updated 2 weeks ago
- Pass-the-Passkey Family of Attacks☆234Sep 14, 2026Updated last month
- Drop any Windows DPAPI artifact and it identifies the format and the exact master key it needs, then decrypts once you supply the key. Of…☆31Sep 23, 2026Updated last month
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- POC pre-auth RCE on Exchange☆193Aug 22, 2026Updated 2 months ago
- ☆15Sep 24, 2026Updated last month
- Post-ex tool to interact with chromium browser when CDP is enabled☆47May 15, 2026Updated 5 months ago
- another PrivEsc potato...☆122Sep 5, 2026Updated 2 months ago
- The swiss army knife of LSASS dumping☆14Jan 4, 2026Updated 10 months ago
- A Beacon Object File (BOF) for Cobalt Strike and Mythic C2 that implements COM hijacking for persistence on Windows systems.☆38Feb 17, 2026Updated 8 months ago
- ☆11Mar 24, 2026Updated 7 months ago
- Some stuff for PHD2021☆14May 21, 2025Updated last year
- DSCourier is a proof-of-concept that uses the WinGet Configuration COM API to apply DSC configurations through Microsoft-signed binaries.☆211Jun 25, 2026Updated 4 months ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Python3 rewrite of AsOutsider features of AADInternals☆65Sep 18, 2026Updated last month
- CVE-2026-50522 PoC☆44Aug 15, 2026Updated 2 months ago
- Havoc BOF implementation of BYOVD attack to terminate PPL-protected EDR processes using a signed Microsoft kernel driver.☆42Apr 6, 2026Updated 7 months ago
- PoC for CVE-2025-4660 demonstrating exploitation of the Forescout SecureConnector on Windows☆16Jul 16, 2025Updated last year
- Dump LSASS via physical memory read primitives in vulnerable kernel drivers☆35Jul 23, 2026Updated 3 months ago
- CVE-2026-65643 – cPanel Domain Parking RCE Toolkit (CVSS 8.7) | Red/Blue Team suite for unpatched cPanel & WHM 11.x (110,134,136,138). 2 …☆14Oct 8, 2026Updated 3 weeks ago
- CVE-2026-83991: Windows Cloud Files access-check bypass☆18Oct 13, 2026Updated 3 weeks ago