Local privilege-escalation proof of concept for the Windows WalletService vulnerability fixed in July 2026.
☆61Jul 20, 2026Updated 3 months ago
Alternatives and similar repositories for CVE-2026-49176_LPE_POC
Users that are interested in CVE-2026-49176_LPE_POC are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Windows AppResolver LPE PoC with a filtered-admin-to-SYSTEM demonstration☆15Jul 17, 2026Updated 3 months ago
- PoC for CVE-2026-58635: Windows Narrator Braille Local Privilege Escalation☆30Jul 15, 2026Updated 3 months ago
- CVE-2026-50343 InstallService StaticPluginMap EoP - standard user to SYSTEM☆48Jul 16, 2026Updated 3 months ago
- CVE-2026-50522 PoC☆44Aug 15, 2026Updated 2 months ago
- CVE-2026-42980 PUBLIC EXPLOIT + RESEARCH☆149Jul 7, 2026Updated 4 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- CVE-2026-24294 PoC☆61Apr 30, 2026Updated 6 months ago
- ☆16Aug 11, 2026Updated 2 months ago
- Detection-aware BloodHound attack-path scoring - the quietest route to your objective, calibrated across five detection tiers (audit/EDR/…☆67Aug 22, 2026Updated 2 months ago
- nginx heap buffer overflow PoC — CVE-2026-42533 pre-auth RCE via two-pass capture clobbering. Crash confirmed on Ubuntu 24.04.☆35Jul 27, 2026Updated 3 months ago
- ☆23Jul 6, 2026Updated 4 months ago
- Proof-of-concept exploit chain (CVE-2026-47301) for Microsoft Configuration Manager (SCCM), combining a broken access, CAB arbitrary-writ…☆108Aug 16, 2026Updated 2 months ago
- Recover NT hashes from NetNTLMv1 responses using local WebGPU computation and local/remote table lookup☆151Oct 7, 2026Updated last month
- ☆56Aug 21, 2026Updated 2 months ago
- Certighost POC☆342Jul 28, 2026Updated 3 months ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- GhostHound is a BloodHound OpenGraph extension that surfaces Active Directory tombstone reanimation as a first-class attack path, enumera…☆47Aug 9, 2026Updated 2 months ago
- PowerShell port of GreenPlasma Admin -> System escalation☆12May 14, 2026Updated 5 months ago
- This repo contains a proof-of-concept exploit for CVE-2026-15409. It establishes non-root remote code execution on SonicWall SMA 1000 by …☆28Jul 15, 2026Updated 3 months ago
- CVE-2026-66804 Windows Cross Device virtual camera EoP - Standard user to SYSTEM☆26Aug 13, 2026Updated 2 months ago
- Netlogon and CLDAP vulnerability research with a proof of concept.☆234Jun 2, 2026Updated 5 months ago
- POC tool for ResetNightmare (CVE-2026-27912)☆225Aug 20, 2026Updated 2 months ago
- Proof of concept exploit for CVE-2026-3775/CVE-2026-3780 and CVE-2026-57239 which lets you obtain NT AUTHORITY\SYSTEM rights via the Foxi…☆17Jul 27, 2026Updated 3 months ago
- Microsoft SharePoint JWT Authentication Bypass (CVE-2026-55040)☆59Aug 10, 2026Updated 2 months ago
- PoC for exploiting CVE-2026-26128.☆64May 6, 2026Updated 6 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Interactive Active Directory shell and attack toolkit over LDAP(S) or ADWS (SOAP) written in Rust. 🦀☆19Updated this week
- ☆63Aug 27, 2026Updated 2 months ago
- Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv…☆114Oct 6, 2026Updated last month
- ☆95Aug 5, 2026Updated 3 months ago
- Port of LSA-Whisperer by Evan McBroom / SpecterOps to the Adaptix C2 BOF framework.☆12Mar 6, 2026Updated 8 months ago
- Ditto is a Windows Mythic Agent for Chroimium Browsers that utilizes Chromium extensions as its base agent with optional sidecar attachme…☆34Oct 15, 2026Updated 3 weeks ago
- CVE-2026-75604 Next.js Windows RCE poc☆109Aug 28, 2026Updated 2 months ago
- Credential and sensitive-data exposure triage for file shares☆17Aug 8, 2026Updated 3 months ago
- Windows BYOVD research on DCRCVDrv.sys and Alinubx.sys, reverse engineering their kernel primitives, IOCTL surfaces, and detection opport…☆38Oct 27, 2026Updated last week
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- CVE-2026-57827 — RSFiles! Joomla Component Unauthenticated File Upload RCE. Split-controller upload bypass. CVSS 9.8 | CWE-434 | com_rsfi…☆16Jul 29, 2026Updated 3 months ago
- ☆88Sep 21, 2026Updated last month
- Mythic C2 MSTeams Communication Channel☆42Sep 13, 2026Updated last month
- A shellcode loader generator with support for multiple injection techniques, built for red team engagements.☆104Jul 1, 2026Updated 4 months ago
- A C# utility for interacting with SCOM☆101Dec 2, 2025Updated 11 months ago
- CVE-2026-42978 — Use-After-Free race condition in Windows Push Notifications (WpnService). Patch diff, root cause analysis, TOCTOU lab, S…☆28Jun 23, 2026Updated 4 months ago
- ☆21Sep 2, 2026Updated 2 months ago