The exploit samples database is a repository for **RCE** (remote code execution) exploits and Proof-of-Concepts for **WINDOWS**, the samples are uploaded for education purposes for red and blue teams.
Switch branches/tags
Nothing to show
Clone or download
smgorelik Added CVE-2018-4990 PoC
Works for 18.01120038
Latest commit 9477e35 Jun 18, 2018

README.md

Windows-RCE-exploits

The exploit samples database is a repository for RCE (remote code execution) exploits and Proof-of-Concepts for WINDOWS, the samples are uploaded for education purposes for red and blue teams.

Proof of Concepts are alwayes idetified by #PoC# in the name of the relevant exploit folder, and those samples will alwayes pop out a calculator or a message box and therefore will be easily identified by many AV's (which prevent the calculator shellcode).

The respository is separated to categories and it's sub-categories based on the different attack vectors(e.g. Web attack vector contain known subcategories which are flash, silverlight or javascript).

Each sub-category includes a list of folders that represent the different CVE's (vulerabilities).

Please remember that some of the samples are live and dangerous! They come encrypted and locked for a reason! Do NOT run them unless you are absolutely sure of what you are doing! They are to be used only for educational purposes (and we mean that!) !!!

All the samples are zipped with the password: infected