CVE-2020-1054 PoC — Win32k Elevation of Privilege Vulnerability

Source

https://github.com/Iamgublin/CVE-2020-1054

Associated Vulnerability

Title: Win32k Elevation of Privilege Vulnerability (CVE-2020-1054)
Description:An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application that could exploit the vulnerability and take control of an affected system. The update addresses this vulnerability by correcting how the Windows kernel-mode driver handles objects in memory.

Readme

# CVE-2020-1054
CVE-2020-1054 Learning


Screenshot
---------------
![效果图](http://img.arch-vile.com/CVE-2020-1054.png)


Reference
-----------------------------
https://0xeb-bp.github.io/blog/2020/06/15/cve-2020-1054-analysis.html
(steal Security token) https://github.com/mwrlabs/CVE-2016-7255
(leak function) https://github.com/DreamoneOnly/CVE-2019-0808-32-64-exp

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →