60 matches found
byeintegrity-uac
ByeIntegrity — Windows UAC Bypass ユーザーアカウント制御（UAC）をバイパスして昇格（管理者）特権を取得し、任意のプログラムを高整合性レベルで実行します。 必要条件 管理者アカウント UAC通知レベルがデフォルト以下に設定されていること 2021年アップデート...
wanderer
Wanderer Wanderer is an open-source program that collects information about running processes. This information includes the integrity level, the presence of the AMSI as a loaded module, whether it is running as 64-bit or 32-bit as well as the privilege level of the current process. This...
wanderer
Wanderer Wandererは、実行中のプロセスに関する情報を収集するオープンソースプログラムです。この情報には、整合性レベル、読み込まれたモジュールとしてのAMSIの有無、64ビットか32ビットかのアーキテクチャ、および現在のプロセスの特権レベルが含まれます。この情報は、プロセスインジェクションに最適な候補に合わせたペイロードを構築する際に非常に役立ちます。 このプロジェクトは、Offensive...
CVE-2026-50416-writeup-and-poc
CVE-2026-50416: デスクトップヒープにおけるQWORD一つ分の過剰 Windows 11 Insiderビルド 10.0.28020.2149 において、Win32kデスクトップヒープのユーザーモードマッピングが、オフセット 0x100 に生のカーネルセッションプールポインタを露出していました。 この読み取り自体は、ほぼ攻撃的に小さなものです: ULONG64 leaked = ULONG64 desktopheap + 0x100; 私のテストセッションでは、次の値が返されました: 0xffffc600dcc00040...
A Deep Dive into the GetProcessHandleFromHwnd API
Posted by James Forshaw In my previous blog post I mentioned the GetProcessHandleFromHwnd API. This was an API I didn’t know existed until I found a publicly disclosed UAC bypass using the Quick Assist UI Access application. This API looked interesting so I thought I should take a closer look. I...
EUVD-2017-3419
Malware in sbrugna...
EUVD-2021-21697
Malware in sbrugna...
EUVD-2015-5121
Malware in sbrugna...
March 8, 2022—KB5011560 (Security-only update)
None None...
Design/Logic Flaw
A component in Kaspersky Password Manager could allow an attacker to elevate a process Integrity level from Medium to High...
CVE-2021-35052
A component in Kaspersky Password Manager could allow an attacker to elevate a process Integrity level from Medium to High...
CVE-2021-35052
Summary: CVE-2021-35052 concerns Kaspersky Password Manager. The connected ZDI advisory states the flaw exists in the Kaspersky Password Manager Service and arises from execution with unnecessary privileges, enabling local attackers to escalate from medium to high integrity by running code in the...
CVE-2021-35052: Improper Privilege Management
A component in Kaspersky Password Manager could allow an attacker to elevate a process Integrity level from Medium to High...
Microsoft Windows Containers Privilege Escalation
Windows Containers: ContainerUser has Elevated Privileges Windows Containers: ContainerUser has Elevated Privileges Platform: Windows 10 20H2 not tested other versions Class: Elevation of Privilege Security Boundary: User Summary: The standard user ContainerUser in a Windows Container has elevate...
CVE-2020-0981
A security feature bypass vulnerability exists when Windows fails to properly handle token relationships.An attacker who successfully exploited the vulnerability could allow an application with a certain integrity level to execute code at a different integrity level, leading to a sandbox escape.T...
Security feature bypass
A security feature bypass vulnerability exists when Windows fails to properly handle token relationships.An attacker who successfully exploited the vulnerability could allow an application with a certain integrity level to execute code at a different integrity level, leading to a sandbox escape.T...
CVE-2020-0981
A security feature bypass vulnerability exists when Windows fails to properly handle token relationships.An attacker who successfully exploited the vulnerability could allow an application with a certain integrity level to execute code at a different integrity level, leading to a sandbox escape.T...
CVE-2020-0981: Incorrect Authorization
A security feature bypass vulnerability exists when Windows fails to properly handle token relationships.An attacker who successfully exploited the vulnerability could allow an application with a certain integrity level to execute code at a different integrity level, leading to a sandbox escape.T...
Windows Token Security Feature Bypass Vulnerability
A security feature bypass vulnerability exists when Windows fails to properly handle token relationships. An attacker who successfully exploited the vulnerability could allow an application with a certain integrity level to execute code at a different integrity level, leading to a sandbox escape...
Immunity Canvas: ALPC_TAKEOVER_LPE
Name| alpctakeoverlpe ---|--- CVE| CVE-2019-0841 Exploit Pack| CANVAS Description| ALPC Takeover LPE Notes| CVE Name: CVE-2019-0841 NOTES: Works with Medium Integrity Level Tested: - Windows 10 1703 x64 - Windows 10 1709 x64 - Windows 10 1803 x86, x64 - Windows 10 1809 x86, x64 VENDOR: Microsoft...