local

GNU Beep 1.3 – ‘HoleyBeep’ Local Privilege Escalation

#!/usr/bin/env python3

Sophos Endpoint Protection Control Panel 10.7 – Weak Password Encryption

[+] Credits: John Page (aka hyp3rlinx)

Sophos Endpoint Protection 10.7 – Tamper-Protection Bypass

[+] Credits: John Page (aka hyp3rlinx)

WebLog Expert Enterprise 9.4 – Privilege Escalation

Exploit Author: bzyo

Faleemi Windows Desktop Software – (DDNS/IP) Local Buffer Overflow

'''

Allok WMV to AVI MPEG DVD WMV Converter 4.6.1217 – Buffer Overflow

# SWAMI KARUPASAMI THUNAI

Allok Video Joiner 4.6.1217 – Stack-Based Buffer Overflow

# SWAMI KARUPASAMI THUNAI

Allok AVI DivX MPEG to DVD Converter 2.6.1217 – Buffer Overflow (SEH)

#!/usr/bin/env python

Microsoft Windows Manager (7 x86) – Menu Management Component UAF Privilege Elevation

#include

LabF nfsAxe 3.7 – Privilege Escalation

Exploit Author: bzyo

Fast AVI MPEG Splitter 1.2 – Stack-Based Buffer Overflow

# SWAMI KARUPASAMI THUNAI

Easy CD DVD Copy 1.3.24 – Local Buffer Overflow (SEH)

#!/usr/bin/python

Crashmail 1.6 – Stack-Based Buffer Overflow (ROP)

# Exploit author: Juan Sacco

Allok Quicktime to AVI MPEG DVD Converter 4.6.1217 – Stack-Based Buffer Overflow

# SWAMI KARUPASAMI THUNAI

Linux Kernel < 4.15.4 - 'show_floppy' KASLR Address Leak

#include

Microsoft Windows – Desktop Bridge Virtual Registry NtLoadKey Arbitrary File Read/Write Privilege Escalation

Windows: Desktop Bridge Virtual Registry NtLoadKey Arbitrary File Read/Write EoP

Microsoft Windows – Desktop Bridge Virtual Registry Arbitrary File Read/Write Privilege Escalation

Microsoft Windows – Desktop Bridge VFS Privilege Escalation

Windows: Windows: Desktop Bridge VFS EoP

Google Software Updater macOS – Unsafe use of Distributed Objects Privilege Escalation

Google software updater ships with Chrome on MacOS and installs a root service (com.google.Keystone.Daemon.UpdateEngine)

Linux Kernel < 4.4.0-116 (Ubuntu 16.04.4) - Local Privilege Escalation

// Tested on:

Microsoft Windows Kernel (7 x86) – Local Privilege Escalation (MS17-017)

#include

SC 7.16 – Stack-Based Buffer Overflow

# Exploit Author: Juan Sacco - http://www.exploitpack.com

Sony Playstation 4 (PS4) 4.55 < 5.50 - WebKit Code Execution (PoC)

function makeid() {

WebLog Expert Enterprise 9.4 – Authentication Bypass

[+] Credits: John Page (aka hyp3rlinx)

Sophos UTM 9.410 – ‘loginuser’ ‘confd’ Service Privilege Escalation

KL-001-2018-007 : Sophos UTM 9 loginuser Privilege Escalation via confd Service

Dup Scout Enterprise 10.5.12 – ‘Share Username’ Local Buffer Overflow

#!/usr/bin/python

Xion 1.0.125 – ‘.m3u’ Local SEH-Based Unicode Venetian Exploit

#!/usr/bin/perl

iSumsoft ZIP Password Refixer 3.1.1 – Buffer Overflow

author = '''

IrfanView 4.50 Email Plugin – Buffer Overflow (SEH Unicode)

#!/usr/bin/python

IrfanView 4.44 Email Plugin – Buffer Overflow (SEH)

#!/usr/bin/python

Microsoft Windows Kernel (7 x86) – Local Privilege Escalation (MS16-039)

#include

Sony Playstation 4 (PS4) 4.07 < 4.55 - 'bpf' Local Kernel Code Execution (PoC)

function stage4_()

Armadito Antivirus 0.12.7.2 – Detection Bypass

Title: Armadito Antivirus - Malware Detection Bypass

NoMachine < 6.0.80 (x64) - 'nxfuse' Privilege Escalation

from ctypes import *

NoMachine < 6.0.80 (x86) - 'nxfuse' Privilege Escalation

#include “stdafx.h”

Microsoft Windows – StorSvc SvcMoveFileInheritSecurity Arbitrary File Creation Privilege Escalation

Windows: StorSvc SvcMoveFileInheritSecurity Arbitrary File Creation EoP

MagniComp SysInfo – mcsiwrapper Privilege Escalation (Metasploit)

##

Microsoft Windows – Constrained Impersonation Capability Privilege Escalation

Windows: Constrained Impersonation Capability EoP

Microsoft Windows – NPFS Symlink Security Feature Bypass/Elevation of Privilege/Dangerous Behavior

Windows: NPFS Symlink Security Feature Bypass/Elevation of Privilege/Dangerous Behavior

Microsoft Windows – Global Reparse Point Security Feature Bypass/Elevation of Privilege

Windows: Global Reparse Point Security Feature Bypass/Elevation of Privilege

ABRT – ‘raceabrt’ Privilege Escalation (Metasploit)

##

Flash ActiveX 18.0.0.194 – Code Execution

## CVE-2015-5112

glibc – ‘LD_AUDIT’ Arbitrary DSO Load Privilege Escalation (Metasploit)

##

glibc – ‘$ORIGIN’ Expansion Privilege Escalation (Metasploit)

##

Juju-run Agent – Privilege Escalation (Metasploit)

##

MalwareFox AntiMalware 2.74.0.150 – Privilege Escalation

Title: MalwareFox AntiMalware 2.74.0.150 - Local Privilege Escalation

Marked2 – Local File Disclosure

BOCHS 2.6-5 – Local Buffer Overflow

# Exploit Author: Juan Sacco - http://exploitpack.com

MalwareFox AntiMalware 2.74.0.150 – Local Privilege Escalation

Title : MalwareFox AntiMalware 2.74.0.150 - Local Privilege Escalation

Apport/ABRT – ‘chroot’ Local Privilege Escalation (Metasploit)

##