nullmap

nullmap A very simple driver manual mapper based on my older voidmap and CVE-2023-21768 POC by chompie and b33f. Because the underlying IoRing post-exploitation memory r/w primitive is not handling many consequent reads and writes very well, I've decided to overwrite CR4 to disable SMEP/SMAP to...

cve-2023-21768-compiled

cve-2023-21768-compiled-version Tested on windows22H2 22621.963. Code from:https://github.com/xforcered/WindowsLPEAFDCVE-2023-21768...

CVE-2023-21768

CVE-2023-21768 PoC...

Windows_AFD_LPE_CVE-2023-21768

CVE-2023-21768 Local Privilege Escalation POC authors: chompie & b33f 复现文章:hlingxbm For demonstration purposes only. Complete exploit works on vulnerable Windows 11 22H2 systems. Write primitive works on all vulnerable systems. Usage: root@kitploit: WindowsAFDLPECVE-2023-21768.exe where is the...

CVE-2023-21768-DSE-Bypass

Forked This project was forked from: WindowsLPEAFDCVE-2023-21768 . Updates This project is updated from chompie1337 exploit and will disable DSE, load an unsigned driver and enable DSE...

CVE-2023-21768

Exploit with IO Rings for CVE-2023-21768 Tested on Windows 22H2 22621.963...

CVE-2023-21768

CVE-2023-21768 OS information root@kitploit: OS 名称: Microsoft Windows 11 专业版 OS 版本: 10.0.22621 暂缺 Build 22621 LPE...

Windows_LPE_AFD_CVE-2023-21768

CVE-2023-21768 Local Privilege Escalation POC authors: chompie & b33f For demonstration purposes only. Complete exploit works on vulnerable Windows 11 22H2 systems. Write primitive works on all vulnerable systems. Usage: root@kitploit: WindowsAFDLPECVE-2023-21768.exe where is the process ID in...

Exploit for Untrusted Pointer Dereference in Microsoft

CVE...

Exploit for Untrusted Pointer Dereference in Microsoft

CVE-2023-21768 - Dotnet Dotnet / c port of AFD-for-WinSock-E...

Exploit for Untrusted Pointer Dereference in Microsoft

CVE-2023-21768 OS Inform...

Exploit for Untrusted Pointer Dereference in Microsoft

CVE-2023-21768 – AFD-for-WinSock-EoP-exploit Analysis articl...

Ancillary Function Driver (AFD) For Winsock Privilege Escalation Exploit

A vulnerability exists in the Windows Ancillary Function Driver for Winsock afd.sys can be leveraged by an attacker to escalate privileges to those of NT AUTHORITY\SYSTEM. Due to a flaw in AfdNotifyRemoveIoCompletion, it is possible to create an arbitrary kernel Write-Where primitive, which can b...

Ancillary Function Driver (AFD) For Winsock Privilege Escalation

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Ancillary Function Driver AFD for WinSock Elevation of Privilege', 'Description' = %q A vulnerability exists in the Windows Ancillary Function...

Exploit for Untrusted Pointer Dereference in Microsoft

CVE-2023-21768-POC CVE-2023-21768: Windows 11 2...

Exploit for Untrusted Pointer Dereference in Microsoft

CVE-2023-21768 Local Privilege Escalation POC authors: chomp...

VulnCheck KEV: CVE-2023-21768

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability...

Exploit for Untrusted Pointer Dereference in Microsoft

CVE-2023-21768 Local Privilege Escalation POC authors: chomp...

Exploit for Untrusted Pointer Dereference in Microsoft

CVE-2023-21768 Local Privilege Escalation POC authors: chomp...

CVE-2023-21768

creationtimestamp| type| source ---|---|--- 2023-01-11 00:34:47+00:00| seen| https://t.me/cibsecurity/56273 2023-03-08 16:03:26+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/3893 2023-03-08 21:11:41+00:00| published-proof-of-concept|...