dis0rder0x00/TrustedHive

LPE Proof-of-Concept for Windows 11 abusing TrustedInstaller's Component Based Servicing (CBS) session COM object and junctions for arbitrary file write.

Visit GitHub

1 contributors

FeaturedAdvertise to 180K+ monthly visitors

Bifrost

Fastest Enterprise AI Gateway for Routing, Governing, and Securing all your AI Traffic

Momentum

How fast dis0rder0x00/TrustedHive is gaining stars, and where it lands on Trendshift and GitHub Trending

Activity and trending

Stars, forks and merged pull requests each day or month, lined up with the repository's rank on Trendshift Trending

Oct 31 – Nov 4, 2026

Stars +56 in 5 days

Forks +10 in 5 days

Merged PRs 0 in 5 days

Trendshift Trendingwhere the repository ranked each day it made the top 25

Not in the Trendshift top 25 in this period

Oct 31Nov 1Nov 2Nov 3Nov 4

Stars, forks, merged pull requests and Trendshift Trending rank, by day
Day	Stars gained	Forks gained
Sat, Oct 31, 2026	+0	+0
Sun, Nov 1, 2026	+6	+1
Mon, Nov 2, 2026	+33	+6
Tue, Nov 3, 2026	+15	+3
Wed, Nov 4, 2026	+2	+0
Total	+56	+10

#1 on the list
Rank that day
Not trending

Social mentions

Recent discussions about this repository across the web

Nov 12 posts
- TrustedHive - LPE Proof-of-Concept for Windows 11 abusing TrustedInstaller's Component Based Servicing (CBS) session COM object and junctions for arbitrary file write
  Read full on X, posted by @ipurple
  @ipurple · x.com
- In July, while continuing to learn reverse engineering, I found an LPE in Windows 11. Likely a duplicate of CVE-2026-81963. But vuln is fixed & my report finally closed, so here is the PoC: Still…
  Read full on X, posted by @dis0rder_0x00
  @dis0rder_0x00 · x.com