Windows_AFD_LPE_CVE-2023-21768

CVE-2023-21768 Local Privilege Escalation POC authors: chompie & b33f 复现文章:hlingxbm For demonstration purposes only. Complete exploit works on vulnerable Windows 11 22H2 systems. Write primitive works on all vulnerable systems. Usage: root@kitploit: WindowsAFDLPECVE-2023-21768.exe where is the...

Windows_LPE_AFD_CVE-2023-21768

CVE-2023-21768 Local Privilege Escalation POC authors: chompie & b33f For demonstration purposes only. Complete exploit works on vulnerable Windows 11 22H2 systems. Write primitive works on all vulnerable systems. Usage: root@kitploit: WindowsAFDLPECVE-2023-21768.exe where is the process ID in...

Windows_MSKSSRV_LPE_CVE-2023-36802

CVE-2023-36802 本地权限提升 POC 作者：chompie 仅供演示用途。完整漏洞利用适用于有漏洞的 Windows 11 22H2 系统。 将漏洞利用适配到所有有漏洞的系统留给读者作为练习。好好练练吧，等等。 使用方法： root@kitploit: WindowsMSKSSRVLPECVE-2023-6802.exe 其中 是要提升权限的目标进程的进程 ID（十进制）。 应导致目标进程被提升至 SYSTEM 权限。 I/O Ring LPE 原语代码基于 Yarden Shafir 的 I/ORing 读写 PoC。 博客文章此处...

CVE-2025-21333-POC

CVE-2025-21333-POC CVE-2025-21333 の vkrnlintvsp.sys における脆弱性を悪用する Proof of Concept です（あまり信頼性は高くありません。「要件と制限」セクションを参照してください）。エクスプロイトを試してみたい方にとって非常に役立つリソースが、参考文献セクションにあります。 脆弱性とエクスプロイトの詳細な分析はこちらで公開されています。 この脆弱性は、脅威アクターによって活発に悪用されていることが確認されました。 Windows 11 23h2 でテスト済みです。 Windows 11 24h2...

IoRingReadWritePrimitive

IoRingReadWritePrimitive 将任意内核写入/递增转换为 Windows 11 22H2+ 上完整读写原语的后渗透利用技术 此 PoC 使用 HackSysExtremeVulnerableDriver 驱动。PoC 同时支持任意写入和任意递增，通过从 main 传入函数的标志进行控制。如需任意递增，请从源码编译最新的 HEVD 驱动。 技术文章: https://windows-internals.com/one-i-o-ring-to-rule-them-all-a-full-read-write-exploit-primitive-on-windows-11/ ...

Windows_LPE_AFD_CVE-2023-21768

CVE-2023-21768 本地权限提升 POC 作者： chompie & b33f 仅用于演示目的。 完整漏洞利用代码适用于存在漏洞的 Windows 11 22H2 系统。 写入原语适用于所有存在漏洞的系统。 用法： root@kitploit: WindowsAFDLPECVE-2023-21768.exe 其中 是要提升权限的进程的进程 ID（十进制）。 应导致目标进程被提升为 SYSTEM I/O Ring LPE 原语代码基于 Yarden Shafir 的 I/ORing 读写 PoC 博客文章即将发布，发布后将更新仓库。...

Exploit for Use After Free in Microsoft

CVE-2023-36802 Local Privilege Escalation POC authors: chomp...

Unbreakable Enterprise kernel security update

5.4.17-2136.323.8 - vhost-scsi: Fix alignment handling with windows Mike Christie Orabug: 35769318 - Revert 'vhost/scsi: support non zerocopy iovecs' Rajan Shanmugavelu Orabug: 35769318 5.4.17-2136.323.7 - x86: change default to specstorebypassdisable=prctl spectrev2user=prctl Andrea Arcangeli...

Metasploit Weekly Wrap-up

Windows 11 ADF WinSock Priv Esc The new windows/local/cve202321768afdlpe exploit makes use of a brand new Windows kernel exploitation technique that leverages the new I/O ring feature introduced in Windows 11 21H2. This technique comes from Yarden Shafir research and provides a full read/write...

Exploit for Untrusted Pointer Dereference in Microsoft

CVE-2023-21768 Local Privilege Escalation POC authors: chomp...

Exploit for Untrusted Pointer Dereference in Microsoft

CVE-2023-21768 Local Privilege Escalation POC authors: chomp...

CVE-2023-21768

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability...

USN-3034-1 linux vulnerability

Jan Stancek discovered that the Linux kernel's memory manager did not properly handle moving pages mapped by the asynchronous I/O AIO ring buffer to the other nodes. A local attacker could use this to cause a denial of service system crash...

Micro:bit — A Pocket-sized Programmable Computer

The BBC has unveiled the final design of the Micro:bit — a pocket-sized computer board designed to lure U.K. school children to embedded electronics. The Micro:bit is essentially a codeable computer that lets kids get creative with technology. It measures 5cm by 4cm and will be available in...