IoRingReadWritePrimitive

IoRingReadWritePrimitive Técnica de post-explotación para convertir la escritura/incremento arbitrario del kernel en una primitiva completa de lectura/escritura en Windows 11 22H2+ Este PoC utiliza el HackSysExtremeVulnerableDriver. El PoC admite tanto escritura arbitraria como incremento...

Exploit for Use After Free in Microsoft

CVE-2023-36802 Local Privilege Escalation POC authors: chomp...

Ancillary Function Driver (AFD) for WinSock Elevation of Privilege

A vulnerability exists in the Windows Ancillary Function Driver for Winsock afd.sys can be leveraged by an attacker to escalate privileges to those of NT AUTHORITY\SYSTEM. Due to a flaw in AfdNotifyRemoveIoCompletion, it is possible to create an arbitrary kernel Write-Where primitive, which can b...