CVE-2017-8464 PoC — 多款Microsoft产品访问控制错误漏洞

介绍

# CVE-2017-8464-EXP
Support x86 and x64

Just for test

Lnk file from:
https://github.com/rapid7/metasploit-framework/pull/8767

Thanks to ykoster

Small change,replace the dll file,fix the bug of crashing explorer.exe.(ykoster has fixed this bug)

POC:

x86:

![Alt text](https://raw.githubusercontent.com/3gstudent/CVE-2017-8464-EXP/master/x86.gif)

x64:

![Alt text](https://raw.githubusercontent.com/3gstudent/CVE-2017-8464-EXP/master/x64.gif)

If you can determine the USB drive,one LNK file is enough,like this:

![Alt text](https://raw.githubusercontent.com/3gstudent/CVE-2017-8464-EXP/master/poc1.png)

More details:

https://3gstudent.github.io/3gstudent.github.io/Windows-Lnk%E8%BF%9C%E7%A8%8B%E4%BB%A3%E7%A0%81%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E(CVE-2017-8464)%E5%88%A9%E7%94%A8%E6%B5%8B%E8%AF%95/

文件快照

备注