collateral-damage

Collateral Damage Collateral Damage — это эксплойт ядра для Xbox SystemOS, использующий CVE-2024-30088. Он нацелен на консоли Xbox One и Xbox Series с версиями ядра 25398.4478, 25398.4908 и 25398.4909. Начальная точка входа — приложение Game Script UWP. Полезные нагрузки первого этапа, загрузчик ...

CVE-2024-30088

CVE-2024-30088...

cve-2024-30088-binary-LPE-PRIVIELEGE-ESCALATION-CYGHT-TOCTOU

이 저장소에는 README가 없습니다...

CVE-2024-30088__Windows-TOCTOU-exploit

CVE-2024-30088 – WinRM 적응형 PoC 📌 요약 이것은 비대화형 환경WinRM에서 작동하도록 조정된 원본 CVE-2024-30088 익스플로잇의 수정 버전입니다. 원본 PoC는 대화형 cmd.exe를 생성하므로 WinRM에서는 작동하지 않습니다. 이 버전은 비대화형 실행과 안정성 에 중점을 둡니다. 🔧 원본 PoC의 변경 사항 CREATENEWCONSOLE를 CREATENOWINDOW로 교체 동기 실행을 보장하기 위해 WaitForSingleObject 추가 WinRM을 통한 가시성을 위해 상세 로깅printf...

cve-2024-30088-binary

Questo repository non contiene un README...

Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Microsoft

CVE-2024-30088 – WinRM Adapted PoC 📌 Summary This is a mo...

OilRig Exploits Windows Kernel Flaw in Espionage Campaign Targeting UAE and Gulf

The Iranian threat actor known as OilRig has been observed exploiting a now-patched privilege escalation flaw impacting the Windows Kernel as part of a cyber espionage campaign targeting the U.A.E. and the broader Gulf region. "The group utilizes sophisticated tactics that include deploying a...

Microsoft Windows TOCTOU Local Privilege Escalation Exploit

CVE-2024-30088 is a Windows kernel elevation of privilege vulnerability which affects many recent versions of Windows 10, Windows 11 and Windows Server 2022. The vulnerability exists inside the function called AuthzBasepCopyoutInternalSecurityAttributes specifically when the kernel copies the...

Microsoft Windows TOCTOU Local Privilege Escalation

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Windows Kernel Time of Check Time of Use LPE in AuthzBasepCopyoutInternalSecurityAttributes', 'Description' = %q CVE-2024-30088 is a Windows Kern...

Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Microsoft

CVE-2024-30088 Questa repository contiene un Proof of Concept...

CVE-2024-30088

creationtimestamp| type| source ---|---|--- 2024-06-26 09:50:07+00:00| published-proof-of-concept| https://t.me/Kelvinseccommunity/529 2024-06-26 17:09:16+00:00| published-proof-of-concept| https://t.me/cybersecs/2884 2024-06-27 04:28:28+00:00| published-proof-of-concept|...

Microsoft Windows Multiple Vulnerabilities (KB5039214)

This host is missing an important security update according to Microsoft KB5039214 SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Microsoft Windows Multiple Vulnerabilities (KB5039211)

This host is missing an important security update according to Microsoft KB5039211 SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

CVE-2024-30088

Windows Kernel Elevation of Privilege Vulnerability...

CVE-2024-30088 Windows Kernel Elevation of Privilege Vulnerability

...

CVE-2024-30088 Windows Kernel Elevation of Privilege Vulnerability

...

CVE-2024-30088

CVE-2024-30088 is a Windows Kernel TOCTOU race condition that can lead to local privilege escalation via AuthzBasepCopyoutInternalSecurityAttributes. Publicly discussed exploits and PoCs exist (Windows kernel LPE PoCs and Metasploit module), and CISA lists it as a known-exploited vulnerability; a...

Windows Kernel Time of Check Time of Use LPE in AuthzBasepCopyoutInternalSecurityAttributes

CVE-2024-30088 is a Windows Kernel Elevation of Privilege Vulnerability which affects many recent versions of Windows 10, Windows 11 and Windows Server 2022. The vulnerability exists inside the function called AuthzBasepCopyoutInternalSecurityAttributes specifically when the kernel copies the...