Exploits

CVE-2021-44529 Ivanti EPM 云服务设备 (CSA) 中的代码注入漏洞允许未经身份验证的用户以有限的权限（nobody）执行任意代码。

POC for the priv esc exploit in PKEXEC [ CVE -2021-4034 ] ( needs fixing, not the best) Converted into go

Apache forward request CVE

Prova de conceito para a vulnerabilidade Polkit Pkexec: CVE-2021-4034(Pkexec Local Privilege Escalation)

CVE-2021-42287/CVE-2021-42278 exploits in powershell

Description of Exploit SMBGhost CVE-2020-0796

Script en python sobre la vulnerabilidad CVE-2021-4034

CVE-2021-44529 PoC

Unspecified vulnerability in Microsoft Windows before 8 allows local users to gain privileges via unknown vectors, as exploited in the wild in April 2015 (Base Score: 7.2 HIGH) Current Description Win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Vista SP2, and Server 2008 SP2 allows local users to gain privileges via a crafted application, as exploited in the wild in April 2015, aka "Win32k Elevation of Privilege Vulnerability

Local Privilege Escalation (LPE) vulnerability found on Polkit's pkexec utility

[CVE-2021-21983] VMware vRealize Operations (vROps) Manager API Arbitrary File Write Leads to Remote Code Execution (RCE)

pkexec --> privilege escalation

CVE-2021-4034 (PWNKIT).

CVE-2022-0492 EXP and Analysis write up

Polkit's Pkexec CVE-2021-4034 Proof Of Concept and Patching

Script en python sobre la vulnerabilidad CVE-2021-4034

A script to check if a container environment is vulnerable to container escapes via CVE-2022-0492

It is a simple script coded in bash scripting to exploit the PwnKit vulnerability (cve-2021-4034), the idea of this is to try to automate the exploitation of this vulnerability as much as possible.