CVE-2024-26229 PoC — Microsoft Windows Kernel 安全漏洞

Source

https://github.com/apkc/CVE-2024-26229-BOF

Associated Vulnerability

Title:Microsoft Windows Kernel 安全漏洞 (CVE-2024-26229)
Description:Microsoft Windows Kernel是美国微软（Microsoft）公司的Windows操作系统的内核。 Microsoft Windows Kernel存在安全漏洞。攻击者利用该漏洞可以提升权限。以下产品和版本受到影响：Windows 10 Version 1809 for 32-bit Systems,Windows 10 Version 1809 for x64-based Systems,Windows 10 Version 1809 for ARM64-based Systems,W

Description

BOF implementations of CVE-2024-26229 for Cobalt Strike and BruteRatel

Readme

# CVE-2024-26229 Beacon Object Files

Beacon Object File (BOF) implementations from [NVISO](https://www.nviso.eu) of CVE-2024-26229 for Cobalt Strike and BruteRatel.

Compile with: 

```bash
gcc -c CVE-2024-26229-bof.c -o CVE-2024-26229-bof.o
```

![Cobalt Strike](CobaltStrike.png)

![BruteRatel](BruteRatel.png)

This vulnerability was patched on April 9th, 2024. See [https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-26229](https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-26229) for details.

The software is provided as-is. Do not expect any future updates.

## Acknowledgements

All credits for the exploit code go to the original author [varwara](https://github.com/varwara/CVE-2024-26229/).

## Authors

- **Sander Forrer** (@Cerbersec)

File Snapshot


 [4.0K]  /data/pocs/a412963cf3167aa782c09caf69ce44ceb2c6cc2c
├── [4.0K]  BruteRatel
│   ├── [ 860]  badger_exports.h
│   ├── [4.4K]  CVE-2024-26229-bof.c
│   ├── [2.2K]  CVE-2024-26229-bof.h
│   └── [3.8K]  CVE-2024-26229-bof.o
├── [230K]  BruteRatel.png
├── [4.0K]  Cobalt Strike
│   ├── [6.6K]  beacon.h
│   ├── [4.3K]  CVE-2024-26229-bof.c
│   ├── [2.2K]  CVE-2024-26229-bof.h
│   └── [3.8K]  CVE-2024-26229-bof.o
├── [ 49K]  CobaltStrike.png
├── [1.0K]  LICENSE.md
└── [ 773]  README.md

2 directories, 12 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!