Windows-kernel-SegmentHeap-Aligned-Chunk-Confusion

Este repositorio contiene un exploit PoC que utiliza una técnica de explotación llamada Aligned Chunk Confusion. Los detalles de la técnica se pueden encontrar en el artículo. Este exploit aprovecha un desbordamiento de montón en el montón del kernel de Windows para elevar sus privilegios de Low ...

Microsoft Windows - 'nt!NtQuerySystemInformation (information class 138_ QueryMemoryTopologyInformation)' Kernel Pool Memory Disclosure

/ We have discovered that the nt!NtQuerySystemInformation system call invoked with the 138 information class discloses portions of uninitialized kernel pool memory to user-mode clients. The specific information class is handled by an internal nt!ExpQueryMemoryTopologyInformation function. While w...

Microsoft Windows - nt!NtQuerySystemInformation (information class 138_ QueryMemoryTopologyInformation) Kernel Pool Memory Disclosure

Microsoft Windows - nt!NtQuerySystemInformation information class 138 QueryMemoryTopologyInformation Kernel Pool Memory Disclosure / We have discovered that the nt!NtQuerySystemInformation system call invoked with the 138 information class discloses portions of uninitialized kernel pool memory to...