CVE-2018-8414 PoC — Microsoft Windows Shell 安全漏洞

Source

https://github.com/whereisr0da/CVE-2018-8414-POC

Associated Vulnerability

Title: Microsoft Windows Shell 安全漏洞 (CVE-2018-8414)
Description:A remote code execution vulnerability exists when the Windows Shell does not properly validate file paths, aka "Windows Shell Remote Code Execution Vulnerability." This affects Windows 10 Servers, Windows 10.

Description

Simple poc of CVE-2018-8414 Windows Package Setting RCE Vulnerability

Readme

# CVE-2018-8414 POC

Windows Shell Package Setting Remote Code Execution Vulnerability

Since : Windows 10 Version 1703 to 1803
       / Windows Server Version 1709 to 1803
       
Note : Some time the exploit fail depending of the file location (default policy settings), so for that just copy the file in the Package Settings Dir and it should execute rightly
* C:\Users\\[USER]\AppData\Local\Packages\windows.immersivecontrolpanel_cw5n1h2txyewy\LocalState\Indexed\Settings\\[LANGUAGE]\

More details : https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8414

Credit to 0patch

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →