CVE-2017-8464 PoC — 多款Microsoft产品访问控制错误漏洞

Source

https://github.com/doudouhala/CVE-2017-8464-exp-generator

Associated Vulnerability

Title: 多款Microsoft产品访问控制错误漏洞 (CVE-2017-8464)
Description:Windows Shell in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows local users or remote attackers to execute arbitrary code via a crafted .LNK file, which is not properly handled during icon display in Windows Explorer or any other application that parses the icon of the shortcut. aka "LNK Remote Code Execution Vulnerability."

Description

this tool can generate a exp for cve-2017-8486, it is developed by python

Readme

# CVE-2017-8464-exp-generator
this tool can generate a exp for cve-2017-8486, it is developed by python

Usage: CVE-2017-8464.py dllname

then there will generate 26 files name as A.lnk,B.lnk,....,Z.lnk
then you just need to put the dll file into any of the disk A:/,B:/,....,Z:/

for example,
if you put all the .lnk files and dll file in a usb. when the usb is connect to the computer, it will run the dll

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →