nomi-sec/PoC-in-GitHub
1
0 Fork 0
mirror of https://github.com/nomi-sec/PoC-in-GitHub.git synced 2026-11-07 08:30:25 -10:00
Code Issues Packages Projects Releases Wiki Activity
Files
master
PoC-in-GitHub/2026/CVE-2026-33825.json
T

247 lines
8.7 KiB
JSON
Raw Permalink Blame History

[
{
"id": 1213858543,
"name": "redsun-bluehammer-undefend-detection-pack",
"full_name": "Letlaka\/redsun-bluehammer-undefend-detection-pack",
"owner": {
"login": "Letlaka",
"id": 13654818,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/13654818?v=4",
"html_url": "https:\/\/github.com\/Letlaka",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Letlaka\/redsun-bluehammer-undefend-detection-pack",
"description": "Microsoft Defender XDR KQL detections for RedSun, BlueHammer, UnDefend, and CVE-2026-33825-related Defender abuse behaviors.",
"fork": false,
"created_at": "2026-04-17T20:52:08Z",
"updated_at": "2026-11-03T06:05:24Z",
"pushed_at": "2026-05-05T20:18:04Z",
"stargazers_count": 11,
"watchers_count": 11,
"has_discussions": false,
"forks_count": 4,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"advanced-hunting",
"bluehammer",
"cve-2026-33825",
"defender-xdr",
"detection-engineering",
"kql-threathunting",
"microsoft-defender",
"microsoft-defender-xdr",
"privilege-escalation",
"redsun",
"threat-detection-windows",
"undefend",
"windows-security"
],
"visibility": "public",
"forks": 4,
"watchers": 11,
"score": 0,
"subscribers_count": 1
},
{
"id": 1215824073,
"name": "Detecting_blue_hammer_vuln",
"full_name": "Bilal3755\/Detecting_blue_hammer_vuln",
"owner": {
"login": "Bilal3755",
"id": 24633053,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/24633053?v=4",
"html_url": "https:\/\/github.com\/Bilal3755",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Bilal3755\/Detecting_blue_hammer_vuln",
"description": "Threat hunting query for bluehammer CVE windows CVE-2026-33825",
"fork": false,
"created_at": "2026-04-20T09:38:06Z",
"updated_at": "2026-04-20T09:38:41Z",
"pushed_at": "2026-04-20T09:38:37Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1217991945,
"name": "CVE-2026-33825",
"full_name": "kaleth4\/CVE-2026-33825",
"owner": {
"login": "kaleth4",
"id": 216897593,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/216897593?v=4",
"html_url": "https:\/\/github.com\/kaleth4",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/kaleth4\/CVE-2026-33825",
"description": null,
"fork": false,
"created_at": "2026-04-22T12:29:39Z",
"updated_at": "2026-04-22T12:39:23Z",
"pushed_at": "2026-04-22T12:39:20Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1227072166,
"name": "CVE-2026-33825",
"full_name": "Joe1sn\/CVE-2026-33825",
"owner": {
"login": "Joe1sn",
"id": 37005640,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/37005640?v=4",
"html_url": "https:\/\/github.com\/Joe1sn",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Joe1sn\/CVE-2026-33825",
"description": "RedSun PoC for self use",
"fork": false,
"created_at": "2026-05-02T06:52:02Z",
"updated_at": "2026-10-13T19:10:28Z",
"pushed_at": "2026-05-02T06:55:23Z",
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 2,
"watchers": 4,
"score": 0,
"subscribers_count": 0
},
{
"id": 1242665975,
"name": "CVE-2026-33825",
"full_name": "0xBlackash\/CVE-2026-33825",
"owner": {
"login": "0xBlackash",
"id": 259905299,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/259905299?v=4",
"html_url": "https:\/\/github.com\/0xBlackash",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/0xBlackash\/CVE-2026-33825",
"description": "CVE-2026-33825",
"fork": false,
"created_at": "2026-05-18T16:28:47Z",
"updated_at": "2026-10-13T19:10:39Z",
"pushed_at": "2026-05-20T10:31:24Z",
"stargazers_count": 9,
"watchers_count": 9,
"has_discussions": false,
"forks_count": 5,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 5,
"watchers": 9,
"score": 0,
"subscribers_count": 0
},
{
"id": 1399551704,
"name": "defender-bluehammer-audit",
"full_name": "anasabugaddara-ux\/defender-bluehammer-audit",
"owner": {
"login": "anasabugaddara-ux",
"id": 266393173,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/266393173?v=4",
"html_url": "https:\/\/github.com\/anasabugaddara-ux",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/anasabugaddara-ux\/defender-bluehammer-audit",
"description": "Defensive Metasploit post module for CVE-2026-33825 (BlueHammer): Defender version\/posture detection + compromise-hunt. Detection only.",
"fork": false,
"created_at": "2026-10-01T08:37:42Z",
"updated_at": "2026-10-19T16:15:02Z",
"pushed_at": "2026-10-19T16:14:59Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1427680271,
"name": "NEO-DEFENDER",
"full_name": "dntaskmehow\/NEO-DEFENDER",
"owner": {
"login": "dntaskmehow",
"id": 277892110,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/277892110?v=4",
"html_url": "https:\/\/github.com\/dntaskmehow",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/dntaskmehow\/NEO-DEFENDER",
"description": "This framework has been **RE-WEAPONIZED** & exploits CVE-2026-33825, a local privilege escalation (LPE) vulnerability in Microsoft Defender caused by insufficient access control granularity. The exploit:",
"fork": false,
"created_at": "2026-10-20T23:50:08Z",
"updated_at": "2026-10-21T00:07:19Z",
"pushed_at": "2026-10-21T00:07:02Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
Reference in new issue View Git Blame Copy Permalink