CVE-2023-38041 PoC — Ivanti Secure Access Client 安全漏洞

Source

https://github.com/ewilded/CVE-2023-38041-POC

Associated Vulnerability

Title:Ivanti Secure Access Client 安全漏洞 (CVE-2023-38041)
Description:Ivanti Secure Access Client是Ivanti公司的一个安全软件客户端。 Ivanti Secure Access Client 22.6R1之前版本存在安全漏洞，该漏洞源于可以通过竞争条件来提升其权限，攻击者利用该漏洞可以在受影响的系统上获得未经授权的权限。

Description

Ivanti Pulse Secure Client Connect Local Privilege Escalation CVE-2023-38041 Proof of Concept

Readme

# CVE-2023-38041-POC
Ivanti Pulse Secure Client Connect Local Privilege Escalation CVE-2023-38041 Proof of Concept

File Snapshot


 [4.0K]  /data/pocs/f51d0a320d6c28931d8e423a92af4a9fa52d9dde
├── [2.3K]  raw.cpp
├── [ 115]  README.md
├── [4.0K]  V2_stacked_oplocks_no_hardlinks_30_percent_reliable
│   ├── [4.7K]  FileOpLock.cpp
│   ├── [ 812]  FileOpLock.h
│   ├── [ 11K]  LICENSE.txt
│   ├── [7.3K]  main.cpp
│   ├── [1.1M]  OK_IT_FINALLY_WORKED.png
│   ├── [1.4K]  PulseSetup.filters
│   ├── [1.4K]  PulseSetup_LPE.sln
│   ├── [ 168]  PulseSetup.user
│   ├── [6.8K]  PulseSetup.vcxproj
│   ├── [ 168]  PulseSetup.vcxproj.user
│   ├── [ 270]  stdafx.h
│   └── [ 314]  targetver.h
└── [4.0K]  V4_oplocks_directory_junctions_mklink
    ├── [4.5K]  FileOpLock.cpp
    ├── [ 812]  FileOpLock.h
    ├── [ 11K]  LICENSE.txt
    ├── [ 22K]  main.cpp
    ├── [1.4K]  PulseSetup.filters
    ├── [1.4K]  PulseSetup_LPE.sln
    ├── [ 168]  PulseSetup.user
    ├── [6.8K]  PulseSetup.vcxproj
    ├── [ 168]  PulseSetup.vcxproj.user
    ├── [  64]  stdafx.h
    ├── [ 314]  targetver.h
    ├── [1002K]  WORKS_LIKE_A_CHARM2.PNG
    └── [974K]  WORKS_LIKE_A_CHARM.PNG

2 directories, 27 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!