CVE-2018-8639 PoC — Microsoft Win32k组件权限许可和访问控制问题漏洞

Source

https://github.com/timwhitez/CVE-2018-8639-EXP

Associated Vulnerability

Title:Microsoft Win32k组件权限许可和访问控制问题漏洞 (CVE-2018-8639)
Description:An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-8641.

Description

CVE-2018-8639-EXP

Readme

# CVE-2018-8639-EXP

CVE-2018-8639 EXP

Usage: CVE-2018-8639-EXP.exe [command]

![image](https://raw.githubusercontent.com/timwhitez/CVE-2018-8639-EXP/master/d8e09856eab715c82ee8647c6a1c60a.png)


## etc
1. 开源的样本大部分可能已经无法免杀,需要自行修改

2. 我认为基础核心代码的开源能够帮助想学习的人
 
3. 本人从github大佬项目中学到了很多
 
4. 若用本人项目去进行：HW演练/红蓝对抗/APT/黑产/恶意行为/违法行为/割韭菜，等行为，本人概不负责，也与本人无关

5. 本人已不参与大小HW活动的攻击方了，若溯源到timwhite id与本人无关

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!