CVE-2023-36802

PoC for CVE-2023-36802 Microsoft Kernel Streaming Service Proxy

CVE-2023-36802 MSKSSRVsys Local Privilege Escalation PoC for CVE-2023-36802 Microsoft Kernel Streaming Service Proxy which suffers from a type confusion vulnerability This proof-of-concept is modeled after the write-up done by Benoît Sevens (@benoitsevens) The article can be found here: googleprojectzerogithubio/0days-in-the-wild//0day-RCAs/2023/CVE-2023-3680

LPE exploit for CVE-2023-36802

CVE-2023-36802 Local Privilege Escalation POC authors: chompie For demonstration purposes only Complete exploit works on vulnerable Windows 11 22H2 systems Adapting the exploit to all vulnerable systems is left as an exercise to the reader Git gud, etc Usage: Windows_MSKSSRV_LPE_CVE-2023-6802exe <pid> where <pid&

LPE exploit for CVE-2023-36802

CVE-2023-36802 Local Privilege Escalation POC authors: chompie For demonstration purposes only Complete exploit works on vulnerable Windows 11 22H2 systems Adapting the exploit to all vulnerable systems is left as an exercise to the reader Git gud, etc Usage: Windows_MSKSSRV_LPE_CVE-2023-6802exe <pid> where <pid&

CVE-2023-36802 ITW case

CVE-2023-36802 CVE-2023-36802 ITW case Explain Using PreviousMode overwrite primitive cwresearchtistorycom/entry/Microsoft-Streaming-Service-Proxy-Elevation-of-Privilege-Vulnerability-CVE-2023-36802 Thanks to chompie Google Project 0

Exploit for CVE-2023-36802 targeting MSKSSRV.SYS driver

PoC for CVE-2023-36802 Exploit targeting MSKSSRVSYS driver The complete exploit works on vulnerable Windows 11 & 10 systems Note If you have any cool tricks & tips that will make this exploit better I'm open to any suggestions :) Credits Valentina Palmiotti (@chompie1337) from IBM X Force Google's project zero analysis