Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2015-1769 PoC — Microsoft Windows Mount Manager 特权提升漏洞

Source
https://github.com/int0/CVE-2015-1769
Associated Vulnerability
Title:Microsoft Windows Mount Manager 特权提升漏洞 (CVE-2015-1769)
Description:Mount Manager in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 mishandles symlinks, which allows physically proximate attackers to execute arbitrary code by connecting a crafted USB device, aka "Mount Manager Elevation of Privilege Vulnerability."
Description
PoC for CVE-2015-1769
Readme
# CVE-2015-1769
PoC for CVE-2015-1769

VHD file to reproduce CVE-2015-1769. VHD doesn't contain actual payload only notepad.exe.

Upon mounting inspect system log for reported blocked error if latest patch is installed.

Batch script shows how symbolic link was created that triggers the vulnerability same mechanism can be used to modify HDD or USB drive.

![image2](https://github.com/int0/CVE-2015-1769/blob/main/CVE-2015-1769-MountMgr.JPG)
File Snapshot

 [4.0K]  /data/pocs/1bde247c8a52ed04d8d8542f447afbc83e90ef5e
├── [ 27K]  CVE-2015-1769-MountMgr.JPG
├── [334K]  CVE-2015-1769.zip
└── [ 444]  README.md

0 directories, 3 files
Shenlong Bot has cached this for you
Remarks
    1. It is advised to access via the original source first.
    2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.
    3. Mirroring, verifying, and maintaining this POC archive takes ongoing effort, so local snapshots are a paid feature. Your subscription keeps the archive online — thank you for the support. View subscription plans →