Exploit catalog

CVE-2019-0708漏洞MSF批量巡检插件

Win32k Exploit by Grant Willcox

Cisco Prime Infrastructure Health Monitor HA TarArchive - Directory Traversal / Remote Code Execution

Win32k Elevation of Privilege Poc

local

initial-access

VMware Workstation 15.1.0 - DLL Hijacking

This program is an script developed in Python which exploit the ACE vulnerability on WinRar - Vulnerability CVE-2018-20250

Webmin Package Updates Remote Command Execution

SEL AcSELerator Architect 2.2.24 - CPU Exhaustion Denial of Service

PoC for CVE-2019-0708

A remote code execution vulnerability exists in Remote Desktop Services – formerly known as Terminal Services – when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests. This vulnerability is pre-authentication and requires no user interaction. An attacker who successfully exploited this vulnerability could execute arbitrary code on the target system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.

CVE-2019-0708 demo

A remote code execution vulnerability exists in Remote Desktop Services – formerly known as Terminal Services – when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests. This vulnerability is pre-authentication and requires no user interaction. An attacker who successfully exploited this vulnerability could execute arbitrary code on the target system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.

POC for CVE-2019-0708

Jaky5155/cve-2019-0708-exp

Powershell script to run and determine if a specific device has been patched for CVE-2019-0708. This checks to see if the termdd.sys file has been updated appropriate and is at a version level at or greater than the versions released in the 5/14/19 patches.

PoC about CVE-2019-0708 (RDP; Windows 7, Windows Server 2003, Windows Server 2008)

RDP POC

IBM Websphere Application Server Network Deployment Untrusted Data Deserialization Remote Code Execution

initial-access

3389远程桌面代码执行漏洞CVE-2019-0708批量检测工具(Rdpscan Bluekeep Check)

initial-access

CVE-2019-0708

EXPloit-poc: https://pan.baidu.com/s/184gN1tJVIOYqOjaezM_VsA 提取码:e2k8

Microsoft Windows - 'Win32k' Local Privilege Escalation

CVE-2019-0708-exploit

HackerJ0e/CVE-2019-0708

Using CVE-2019-0708 to Locally Promote Privileges in Windows 10 System

CVE-2019-0708 exp