byeintegrity-uac

ByeIntegrity — Windows UAC 우회 사용자 계정 컨트롤UAC을 우회하여 상승된관리자 권한을 획득하고 높은 무결성 수준에서 모든 프로그램을 실행합니다. 요구 사항 관리자 계정 UAC 알림 수준이 기본값 이하로 설정됨 2021 업데이트 ByeIntegrity를 훨씬 더 빠르고, 가볍고, 안정적으로 업데이트하기로 결정했습니다. 이는 상당한 개편이므로 VS 솔루션에 "ByeIntegrity2021"이라는 새 프로젝트를 만들었습니다. 이는 이 공격의 업데이트된 버전입니다. 물론 원본 버전은 여전히 존재합니다. 새 버전...

wanderer

Wanderer Wanderer는 실행 중인 프로세스에 대한 정보를 수집하는 오픈소스 프로그램입니다. 이 정보에는 무결성 수준, 로드된 모듈로서의 AMSI 존재 여부, 64비트 또는 32비트 실행 여부 및 현재 프로세스의 권한 수준이 포함됩니다. 이 정보는 프로세스 인젝션에 적합한 대상에 맞춰진 페이로드를 구축할 때 매우 유용합니다. 이 프로젝트는 제가 Offensive Security의 PEN-300 과정을 수강하면서 작업하기 시작한 것입니다. 과정에서 가장 마음에 들었던 모듈 중 하나는 프로세스 인젝션 및 마이그레이션...

wanderer

Wanderer Wanderer is an open-source program that collects information about running processes. This information includes the integrity level, the presence of the AMSI as a loaded module, whether it is running as 64-bit or 32-bit as well as the privilege level of the current process. This...

CVE-2026-50416-writeup-and-poc

CVE-2026-50416: 데스크톱 힙에 하나의 QWORD가 너무 많음 Windows 11 Insider 빌드 10.0.28020.2149에서 Win32k 데스크톱 힙의 사용자 모드 매핑이 오프셋 0x100에 원시 커널 세션 풀 포인터를 노출했습니다. 읽기 자체는 거의 공격적으로 작을 정도입니다: ULONG64 leaked = ULONG64 desktopheap + 0x100; 테스트 세션에서 다음 값이 반환되었습니다: 0xffffc600dcc00040 이 값은 동일한 데스크톱의 프로세스 간에 동일하게 유지되었으며 재부팅 후...

A Deep Dive into the GetProcessHandleFromHwnd API

Posted by James Forshaw In my previous blog post I mentioned the GetProcessHandleFromHwnd API. This was an API I didn’t know existed until I found a publicly disclosed UAC bypass using the Quick Assist UI Access application. This API looked interesting so I thought I should take a closer look. I...

EUVD-2017-3419

Malware in sbrugna...

EUVD-2021-21697

Malware in sbrugna...

EUVD-2015-5121

Malware in sbrugna...

March 8, 2022—KB5011560 (Security-only update)

None None...

Design/Logic Flaw

A component in Kaspersky Password Manager could allow an attacker to elevate a process Integrity level from Medium to High...

CVE-2021-35052

A component in Kaspersky Password Manager could allow an attacker to elevate a process Integrity level from Medium to High...

CVE-2021-35052

Summary: CVE-2021-35052 concerns Kaspersky Password Manager. The connected ZDI advisory states the flaw exists in the Kaspersky Password Manager Service and arises from execution with unnecessary privileges, enabling local attackers to escalate from medium to high integrity by running code in the...

CVE-2021-35052: Improper Privilege Management

A component in Kaspersky Password Manager could allow an attacker to elevate a process Integrity level from Medium to High...

Microsoft Windows Containers Privilege Escalation

Windows Containers: ContainerUser has Elevated Privileges Windows Containers: ContainerUser has Elevated Privileges Platform: Windows 10 20H2 not tested other versions Class: Elevation of Privilege Security Boundary: User Summary: The standard user ContainerUser in a Windows Container has elevate...

CVE-2020-0981

A security feature bypass vulnerability exists when Windows fails to properly handle token relationships.An attacker who successfully exploited the vulnerability could allow an application with a certain integrity level to execute code at a different integrity level, leading to a sandbox escape.T...

Security feature bypass

A security feature bypass vulnerability exists when Windows fails to properly handle token relationships.An attacker who successfully exploited the vulnerability could allow an application with a certain integrity level to execute code at a different integrity level, leading to a sandbox escape.T...

CVE-2020-0981

A security feature bypass vulnerability exists when Windows fails to properly handle token relationships.An attacker who successfully exploited the vulnerability could allow an application with a certain integrity level to execute code at a different integrity level, leading to a sandbox escape.T...

CVE-2020-0981: Incorrect Authorization

A security feature bypass vulnerability exists when Windows fails to properly handle token relationships.An attacker who successfully exploited the vulnerability could allow an application with a certain integrity level to execute code at a different integrity level, leading to a sandbox escape.T...

Windows Token Security Feature Bypass Vulnerability

A security feature bypass vulnerability exists when Windows fails to properly handle token relationships. An attacker who successfully exploited the vulnerability could allow an application with a certain integrity level to execute code at a different integrity level, leading to a sandbox escape...

Immunity Canvas: ALPC_TAKEOVER_LPE

Name| alpctakeoverlpe ---|--- CVE| CVE-2019-0841 Exploit Pack| CANVAS Description| ALPC Takeover LPE Notes| CVE Name: CVE-2019-0841 NOTES: Works with Medium Integrity Level Tested: - Windows 10 1703 x64 - Windows 10 1709 x64 - Windows 10 1803 x86, x64 - Windows 10 1809 x86, x64 VENDOR: Microsoft...