CVE-2023-21768

CVE-2023-21768 用于 WinSock 的 Windows 辅助功能驱动程序 根据 Microsoft Security Response Center MSRC 发布的 CVE-2023-21768 详细描述，该漏洞存在于 Ancillary Function Driver AFD 中，其在系统中的文件名为 afd.sys。AFD 模块是 WinSock API 的内核入口点。在本文分析中，我将利用它在 Windows 11 上进行本地权限提升（LPE）。 补丁差异与根因分析 从 Winbindex 下载两个版本的...

Exploit for Untrusted Pointer Dereference in Microsoft

It is an exploit module targeting Apache HTTP Server. The target...

Microsoft Windows Kernel - 'win32k.sys' Multiple 'NtGdiGetDIBitsInternal' System Call

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1078 We have discovered two bugs in the implementation of the win32k!NtGdiGetDIBitsInternal system call, which is a part of the graphic subsystem in all modern versions of Windows. The issues can potentially lead to kernel pool...

Win10Pcap - Local Privilege Escalation Vulnerability

Exploit for windows platform in category local exploits Source: https://github.com/Rootkitsmm/Win10Pcap-Exploit / Win10Pcap kernel-mode driver did not check the virtual addresses which are passed from the user-mode , IOCTL Using Neither Buffered Nor Direct I/O without ProbeForWrite to validating...

Windows XP core driver AFD.sys a local elevation of privilege vulnerability analysis(ms08066)-vulnerability warning-the black bar safety net

Author: Polymorphours Email: [email protected] Homepage:http://www. whitecell. org Date: 2008-10-15 Vulnerability module: AFD.sys Vulnerability type: arbitrary kernel address can be written This vulnerability is one can write arbitrary kernel address vulnerabilities, generated the...

DESlock+ 3.2.7 - Local Kernel Race Condition Denial of Service (PoC)

DESlock+ 3.2.7 - Local Kernel Race Condition Denial of Service PoC / deslock-probe-race.c Copyright c 2008 by DESlock+ include include define DLMFENCIOCTL 0x0FA4204C define DLMFENCFLAG 0xDEADBEEF define ARGSIZEa a-sizeof int2/sizeof void struct ioctlreq int flag; int reqnum; void argARGSIZE0x20; ...

DESlock+ <= 3.2.7 Local Kernel Race Condition Denial of Service PoC

Exploit for unknown platform in category dos / poc =================================================================== DESlock+ DESlock+ include include define DLMFENCIOCTL 0x0FA4204C define DLMFENCFLAG 0xDEADBEEF define ARGSIZEa a-sizeof int2/sizeof void struct ioctlreq int flag; int reqnum; voi...

DESlock+ < 3.2.7 - Local Kernel Race Condition Denial of Service (PoC)

/ deslock-probe-race.c Copyright c 2008 by DESlock+ include include define DLMFENCIOCTL 0x0FA4204C define DLMFENCFLAG 0xDEADBEEF define ARGSIZEa a-sizeof int2/sizeof void struct ioctlreq int flag; int reqnum; void argARGSIZE0x20; ; void hammerthread void zpage BOOL result; printf " child using pa...