nullmap

nullmap A very simple driver manual mapper based on my older voidmap and CVE-2023-21768 POC by chompie and b33f. Because the underlying IoRing post-exploitation memory r/w primitive is not handling many consequent reads and writes very well, I've decided to overwrite CR4 to disable SMEP/SMAP to...

CVE-2023-21768-DSE-Bypass

Bifurcación Este proyecto fue bifurcado de: WindowsLPEAFDCVE-2023-21768 . Actualizaciones Este proyecto es una actualización del exploit de chompie1337 y deshabilitará DSE, cargará un controlador sin firmar y habilitará DSE...

CVE-2023-21768

Exploit with IO Rings for CVE-2023-21768 Tested on Windows 22H2 22621.963...

CVE-2023-21768

CVE-2023-21768 OS information OS 名称: Microsoft Windows 11 专业版 OS 版本: 10.0.22621 暂缺 Build 22621 LPE...

cve-2023-21768-compiled

cve-2023-21768-编译版本 在windows22H2 22621.963上测试。 代码来自：https://github.com/xforcered/WindowsLPEAFDCVE-2023-21768...

CVE-2023-21768

CVE-2023-21768 PoC...

Windows_LPE_AFD_CVE-2023-21768

CVE-2023-21768 POC de escalada de privilegios local autores: chompie & b33f Solo con fines de demostración. El exploit completo funciona en sistemas vulnerables de Windows 11 22H2. La primitiva de escritura funciona en todos los sistemas vulnerables. Uso: WindowsAFDLPECVE-2023-21768.exe donde es ...

Windows_AFD_LPE_CVE-2023-21768

CVE-2023-21768 本地权限提升 PoC 作者：chompie & b33f 复现文章：hlingxbm 仅用于演示目的。完整漏洞利用适用于易受攻击的 Windows 11 22H2 系统。 写入原语适用于所有易受攻击的系统。 用法： WindowsAFDLPECVE-2023-21768.exe 其中 是要提权的进程 ID（十进制）。 执行后应使目标进程提升至 SYSTEM 权限。 I/O Ring LPE 原语代码基于 Yarden Shafir 的 I/ORing R/W PoC。 博客文章即将发布，届时将更新此仓库。...

Exploit for Untrusted Pointer Dereference in Microsoft

CVE...

Exploit for Untrusted Pointer Dereference in Microsoft

CVE-2023-21768 - Dotnet Dotnet / c port of AFD-for-WinSock-E...

Exploit for Untrusted Pointer Dereference in Microsoft

CVE-2023-21768 OS Inform...

Exploit for Untrusted Pointer Dereference in Microsoft

CVE-2023-21768 – AFD-for-WinSock-EoP-exploit Analysis articl...

Ancillary Function Driver (AFD) For Winsock Privilege Escalation Exploit

A vulnerability exists in the Windows Ancillary Function Driver for Winsock afd.sys can be leveraged by an attacker to escalate privileges to those of NT AUTHORITY\SYSTEM. Due to a flaw in AfdNotifyRemoveIoCompletion, it is possible to create an arbitrary kernel Write-Where primitive, which can b...

Ancillary Function Driver (AFD) For Winsock Privilege Escalation

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Ancillary Function Driver AFD for WinSock Elevation of Privilege', 'Description' = %q A vulnerability exists in the Windows Ancillary Function...

Exploit for Untrusted Pointer Dereference in Microsoft

CVE-2023-21768-POC CVE-2023-21768: Windows 11 2...

Exploit for Untrusted Pointer Dereference in Microsoft

CVE-2023-21768 Local Privilege Escalation POC authors: chomp...

VulnCheck KEV: CVE-2023-21768

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability...

Exploit for Untrusted Pointer Dereference in Microsoft

CVE-2023-21768 Local Privilege Escalation POC authors: chomp...

Exploit for Untrusted Pointer Dereference in Microsoft

CVE-2023-21768 Local Privilege Escalation POC authors: chomp...

CVE-2023-21768

creationtimestamp| type| source ---|---|--- 2023-01-11 00:34:47+00:00| seen| https://t.me/cibsecurity/56273 2023-03-08 16:03:26+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/3893 2023-03-08 21:11:41+00:00| published-proof-of-concept|...