RepoAlerts
SponsorGet alerts

dis0rder0x00/TrustedHive

Get alerts like thisView on GitHubShare on X

Can I trust it?

Be careful with this one.

  • Warnings Check

    Very new: it was created 4 days ago. Wait a little before installing it.

  • Stars from real accounts No data

    We haven't checked its stars for fakes yet.

  • Active OK

    Last change 4 days ago.

  • Licence Careful

    No licence: legally you can't reuse the code, unless the README says otherwise.

Quick checks from public data. They help, but they are no guarantee.

What it is

Proof-of-concept local privilege escalation exploit for Windows 11 and Server 2025 that abuses an ungated method of the TrustedInstaller CBS session COM object, together with NTFS junctions and symbolic links, to write arbitrary files as SYSTEM from a non-administrator account…

Who it's for

Security researchers and Windows security engineers analyzing CBS servicing stack vulnerabilities

How to use it

Ask your AI to set it up

Paste this into Claude, ChatGPT or your coding assistant.

Help me install and set up dis0rder0x00/TrustedHive in my project. Follow its README: https://github.com/dis0rder0x00/TrustedHive. Explain each step and check it is safe before running anything.

Read the README

Star curve

58From 0 to 58 stars between 1 Nov 2026 and 5 Nov 2026.

Get alerts for repos like this

We'll email you when repos like this start rising. Free, once a week, only what matches.

What arrives: one email on Mondays with the repos that match, never more. See last week's. Privacy

For maintainers

Add this badge to your README. It shows the repo's place on the radar, updates every hour and links back to this page.

[![dis0rder0x00/TrustedHive on RepoAlerts](https://repoalerts.com/badge/dis0rder0x00/TrustedHive.svg)](https://repoalerts.com/repo/dis0rder0x00/TrustedHive?ref=badge)
Share on X
  • notinferred/keypaste

    A KeePass-compatible password and secrets manager that stores logins and project environment variables in a local KDBX vault with no account or network. It injects secrets into commands and asks the u

    CLI toolAI agentsC# · 839 stars · +207 this week · 61 days old

  • S12cybersecurity/CredGuardRuntimeShutdown

    Proof-of-concept C code that claims to disable Windows Credential Guard at runtime and read NT password hashes from LSASS memory after a test logon. It requires an elevated admin process and includes

    C · 108 stars · +42 this week · 10 days old

  • ZeroDayEvil/CVE-2026-75604-PoC

    A security audit module for the AI Security Tool that detects and validates CVE-2026-75604, an unauthenticated remote code execution flaw in Next.js applications on Windows. It is run from the AI Secu

    178 stars · 38 days old

  • eness/php2shell-CVE-2026-109618-CVE-2026-109619-PoC

    Proof-of-concept exploit for two PHP core vulnerabilities (CVE-2026-109618 and CVE-2026-109619) that allow remote code execution in vulnerable PHP environments. Includes a README with affected version

    Shell · 1,072 stars · +26 this week · 16 days old

  • syrex1013/php2shell

    Proof-of-concept exploit and lab for CVE-2026-109618 and CVE-2026-109619, a heap use-after-free in PHP's session.upload_progress handling. Includes a Docker lab reproducing the stale-pointer write on

    Python · 152 stars · +3 this week · 16 days old

  • SplendorCooper/ExitLag

    Distributes a pre-activated Windows installer for a program called Exitlag, described as an optimized desktop utility. The README gives a PowerShell command that downloads and runs a remote script and

    Apps & desktop97 stars · 19 days old