Proof of concept about a path traversal vulnerability in Microsoft's Diagcab technology that could lead to remote code execution
☆21Jun 16, 2022Updated 4 years ago
Alternatives and similar repositories for microsoft-diagcab-rce-poc
Users that are interested in microsoft-diagcab-rce-poc are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- 🐾Dogwalk PoC (using diagcab file to obtain RCE on windows)☆76Aug 11, 2022Updated 3 years ago
- Write-up for another forgotten Windows vulnerability (0day): Microsoft Windows Contacts (VCF/Contact/LDAP) syslink control href attribute…☆154Jun 18, 2023Updated 3 years ago
- Yet, Another Packer/Loader☆25Feb 26, 2023Updated 3 years ago
- A powerful, standalone YouTube video & playlist downloader built with C# WPF. Features smart size calculation, auto-dark mode, and built-…☆77Apr 16, 2026Updated 2 months ago
- SettingContent-MS File Execution vulnerability in Windows 10☆24Jan 7, 2026Updated 6 months ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Yet another Windows DLL injector.☆39Nov 17, 2021Updated 4 years ago
- ☆34Apr 15, 2022Updated 4 years ago
- Proof of Concept code for CVE-2020-0728☆46Feb 12, 2020Updated 6 years ago
- PoC of injecting code into a running Linux process☆22Sep 11, 2019Updated 6 years ago
- A PoC~ish of https://elastic.github.io/security-research/malware/2022/01/01.operation-bleeding-bear/article/☆31Feb 26, 2024Updated 2 years ago
- A years-old exploit of a local EoP vulnerability in Kingsoft Antivirus KWatch Driver version 2009.3.17.77.☆38Mar 16, 2022Updated 4 years ago
- ☆23Jun 9, 2024Updated 2 years ago
- Proof of concept for CVE-2021-24086, a NULL dereference in tcpip.sys triggered remotely.☆236Apr 15, 2021Updated 5 years ago
- ☆16Feb 29, 2020Updated 6 years ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- Alternative Mimikatz LSASS DUMPER☆14Apr 2, 2020Updated 6 years ago
- Adobe Acrobat Reader - CVE-2023-21608 - Remote Code Execution Exploit☆282Dec 5, 2023Updated 2 years ago
- ☆29Aug 10, 2019Updated 6 years ago
- ☆33Aug 10, 2019Updated 6 years ago
- Ivanti EPM SQL Injection Remote Code Execution Vulnerability☆25Jun 12, 2024Updated 2 years ago
- x64 Windows privilege elevation using anycall☆22May 28, 2021Updated 5 years ago
- POC of CVE-2022-21881 exploited at TianfuCup 2021 to escape Chrome Sandbox☆21Aug 9, 2022Updated 3 years ago
- ☆125Sep 5, 2024Updated last year
- Ivanti EPM AgentPortal RCE Vulnerability☆20Sep 16, 2024Updated last year
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- CVE-2019-1064 Local Privilege Escalation Vulnerability☆11Jun 12, 2019Updated 7 years ago
- A PoC weaponising CustomXMLPart for hiding malware code inside of Office document structures.☆39Aug 8, 2022Updated 3 years ago
- PoC MSI payload based on ASEC/AhnLab's blog post☆25Sep 19, 2022Updated 3 years ago
- CVE-2020-5410 Spring Cloud Config directory traversal vulnerability☆30Jun 16, 2020Updated 6 years ago
- My personal collection of webshells for educational purposes. Most are custom implementations/adaptations of stuff I found on the interne…☆21May 20, 2024Updated 2 years ago
- A simple, LFI vulnerable PHP application☆20Sep 27, 2018Updated 7 years ago
- Proof of Concept Exploit for CVE-2024-9465☆31Oct 9, 2024Updated last year
- Proof of Concept for EFSRPC Arbitrary File Upload (CVE-2021-43893)☆64Feb 14, 2022Updated 4 years ago
- ☆246Sep 6, 2022Updated 3 years ago
- End-to-end encrypted cloud storage - Proton Drive • AdSpecial offer: 40% Off Yearly / 80% Off First Month. Protect your most important files, photos, and documents from prying eyes.
- ☆43Aug 10, 2019Updated 6 years ago
- ☆22Mar 6, 2023Updated 3 years ago
- A blind XXE injection callback handler. Uses HTTP and FTP to extract information. Originally written in Ruby by ONsec-Lab.☆11Mar 18, 2019Updated 7 years ago
- Telegram notification for metasploit sessions.☆14Nov 22, 2018Updated 7 years ago
- A curated list of tools and techniques written from experience in weaponization of malware☆40Oct 26, 2023Updated 2 years ago
- RemoteFS SMB client☆13Mar 20, 2025Updated last year
- r0ak ("roak") is the Ring 0 Army Knife -- A Command Line Utility To Read/Write/Execute Ring Zero on for Windows 10 Systems☆27Jul 27, 2018Updated 7 years ago