Proof of concept about a path traversal vulnerability in Microsoft's Diagcab technology that could lead to remote code execution
☆21Jun 16, 2022Updated 4 years ago
Alternatives and similar repositories for microsoft-diagcab-rce-poc
Users that are interested in microsoft-diagcab-rce-poc are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- 🐾Dogwalk PoC (using diagcab file to obtain RCE on windows)☆76Aug 11, 2022Updated 3 years ago
- A sample spyware written in VB.NET☆20Mar 11, 2017Updated 9 years ago
- Yet, Another Packer/Loader☆25Feb 26, 2023Updated 3 years ago
- Write-up for another forgotten Windows vulnerability (0day): Microsoft Windows Contacts (VCF/Contact/LDAP) syslink control href attribute…☆155Jun 18, 2023Updated 3 years ago
- may the poc with you☆16May 6, 2022Updated 4 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- SettingContent-MS File Execution vulnerability in Windows 10☆24Jan 7, 2026Updated 6 months ago
- Yet another Windows DLL injector.☆39Nov 17, 2021Updated 4 years ago
- Proof of Concept code for CVE-2020-0728☆46Feb 12, 2020Updated 6 years ago
- ☆34Apr 15, 2022Updated 4 years ago
- Python script to leverage MSFT_MTProcess WMI class☆40Sep 17, 2025Updated 10 months ago
- PoC of injecting code into a running Linux process☆22Sep 11, 2019Updated 6 years ago
- A PoC~ish of https://elastic.github.io/security-research/malware/2022/01/01.operation-bleeding-bear/article/☆31Feb 26, 2024Updated 2 years ago
- A years-old exploit of a local EoP vulnerability in Kingsoft Antivirus KWatch Driver version 2009.3.17.77.☆38Mar 16, 2022Updated 4 years ago
- python tool for backdooring an android apk with meterpreter payload & bypass some AV☆24Sep 30, 2020Updated 5 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- Alternative Mimikatz LSASS DUMPER☆14Apr 2, 2020Updated 6 years ago
- ☆22Jun 9, 2024Updated 2 years ago
- ☆16Feb 29, 2020Updated 6 years ago
- Proof of concept for CVE-2021-24086, a NULL dereference in tcpip.sys triggered remotely.☆236Apr 15, 2021Updated 5 years ago
- POC of CVE-2022-21881 exploited at TianfuCup 2021 to escape Chrome Sandbox☆21Aug 9, 2022Updated 3 years ago
- Ivanti EPM SQL Injection Remote Code Execution Vulnerability☆25Jun 12, 2024Updated 2 years ago
- PoC for CVE-2025-48384☆20Jul 9, 2025Updated last year
- ☆29Aug 10, 2019Updated 6 years ago
- ☆33Aug 10, 2019Updated 6 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- x64 Windows privilege elevation using anycall☆22May 28, 2021Updated 5 years ago
- ☆126Sep 5, 2024Updated last year
- Ivanti EPM AgentPortal RCE Vulnerability☆20Sep 16, 2024Updated last year
- PoC MSI payload based on ASEC/AhnLab's blog post☆25Sep 19, 2022Updated 3 years ago
- ☆18Sep 9, 2025Updated 10 months ago
- CVE-2019-1064 Local Privilege Escalation Vulnerability☆11Jun 12, 2019Updated 7 years ago
- CVE-2024-40431+CVE-2022-25479 chain for EOP(DATA ONLY ATTACK)☆47Oct 16, 2024Updated last year
- A PoC weaponising CustomXMLPart for hiding malware code inside of Office document structures.☆39Aug 8, 2022Updated 3 years ago
- ☆18Dec 12, 2020Updated 5 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- A blind XXE injection callback handler. Uses HTTP and FTP to extract information. Originally written in Ruby by ONsec-Lab.☆11Mar 18, 2019Updated 7 years ago
- Exploit for CVE-2021-27342 vulnerability (telnet authentication brute-force protection bypass)☆15May 15, 2021Updated 5 years ago
- ☆22Mar 6, 2023Updated 3 years ago
- Proof of Concept Exploit for CVE-2024-9465☆31Oct 9, 2024Updated last year
- Proof of Concept for EFSRPC Arbitrary File Upload (CVE-2021-43893)☆64Feb 14, 2022Updated 4 years ago
- ☆246Sep 6, 2022Updated 3 years ago
- A crypto trading bot script made in Python to backtest a RSI strategy focused on scalping in the 1-5-15m timeframes with high W/R in Spot…☆25Dec 9, 2023Updated 2 years ago