CVE-2010-0232 PoC — Microsoft Windows #GP陷阱处理器本地权限提升漏洞

Source

https://github.com/azorfus/CVE-2010-0232

Associated Vulnerability

Title:Microsoft Windows #GP陷阱处理器本地权限提升漏洞 (CVE-2010-0232)
Description:Microsoft Windows是美国微软（Microsoft）公司发布的一系列操作系统。 Windows的内核#GP陷井处理例程对执行的环境做了一些不正确的假设，本地普通用户权限的攻击者可以通过伪造执行环境中的数据使操作系统在ring0层执行指定的任意指令，从而取得对系统的完全控制。此漏洞影响几乎所有的x86 32位的Windows系统。为了在老式的16位应用中支持BIOS服务例程，Windows NT内核支持Virtual-8086模式监控代码中的BIOS调用，分两个阶段实现。当#GP陷阱处理器(

Description

Development of an exploit for privilege escalation in Windows systems ( NT / 2k / XP / 2K3 / VISTA / 2k8 / 7 ) using the vulnerability CVE-2010-0232

Readme

# CVE-2010-0232
Development of an exploit for privilege escalation in Windows systems ( NT / 2k / XP / 2K3 / VISTA / 2k8 / 7 ) using the vulnerability CVE-2010-0232.
This is an educational project I took up to learn the gruesome details of lowlevel kernel exploits, This is my first such exploit.
I'm learning by coding along with reading the exploit code and explnation written by Tavis Ormandy. You can find the vulnerability description and exploit given by him here: https://www.exploit-db.com/exploits/11199

File Snapshot


 [4.0K]  /data/pocs/7e3b2ac498ddde0cf93caaf293a204f795e4b369
├── [1.9K]  analysis.txt
├── [4.0K]  KiTrap0D
│   ├── [9.5K]  ADVISORY
│   ├── [ 327]  Makefile
│   ├── [ 456]  README
│   ├── [253K]  screenshot.png
│   ├── [ 16K]  vdmallowed.c
│   ├── [ 72K]  vdmallowed.exe
│   ├── [ 13K]  vdmexploit.c
│   └── [ 42K]  vdmexploit.dll
├── [ 10K]  KiTrap0D.txt
├── [1.0K]  LICENSE
└── [ 513]  README.md

1 directory, 12 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!