CVE-2018-8639 PoC — Microsoft Win32k组件权限许可和访问控制问题漏洞

Source

https://github.com/ze0r/CVE-2018-8639-exp

Associated Vulnerability

Title:Microsoft Win32k组件权限许可和访问控制问题漏洞 (CVE-2018-8639)
Description:An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-8641.

Readme

# CVE-2018-8639-exp  
platform: windows 2008 and windows 2008 R2

File Snapshot


 [4.0K]  /data/pocs/6f50dde7882bcc9fcb32fac420ab1dd0f6fc00de
├── [  67]  README.md
├── [4.0K]  win7_x86
│   ├── [4.0K]  cve
│   │   ├── [   0]  _asm.asm
│   │   ├── [ 448]  asm.obj
│   │   ├── [6.6K]  cve.cpp
│   │   ├── [7.8K]  cve.vcxproj
│   │   ├── [1.2K]  cve.vcxproj.filters
│   │   ├── [1.4K]  ReadMe.txt
│   │   ├── [4.0K]  Release
│   │   │   ├── [ 745]  cve.Build.CppClean.log
│   │   │   ├── [ 301]  cve.log
│   │   │   ├── [ 80K]  cve.obj
│   │   │   ├── [3.1M]  cve.pch
│   │   │   ├── [4.0K]  cve.tlog
│   │   │   │   ├── [1.3K]  CL.command.1.tlog
│   │   │   │   ├── [ 22K]  CL.read.1.tlog
│   │   │   │   ├── [ 652]  CL.write.1.tlog
│   │   │   │   ├── [ 192]  cve.lastbuildstate
│   │   │   │   ├── [1.2K]  link.command.1.tlog
│   │   │   │   ├── [3.0K]  link.read.1.tlog
│   │   │   │   └── [ 544]  link.write.1.tlog
│   │   │   ├── [111K]  stdafx.obj
│   │   │   └── [212K]  vc140.pdb
│   │   ├── [ 199]  stdafx.cpp
│   │   ├── [ 219]  stdafx.h
│   │   ├── [ 232]  targetver.h
│   │   └── [4.0K]  x64
│   │       └── [4.0K]  Release
│   │           ├── [1.0K]  cve.Build.CppClean.log
│   │           ├── [ 275]  cve.log
│   │           ├── [ 81K]  cve.obj
│   │           ├── [3.1M]  cve.pch
│   │           ├── [4.0K]  cve.tlog
│   │           │   ├── [1.3K]  CL.command.1.tlog
│   │           │   ├── [ 22K]  CL.read.1.tlog
│   │           │   ├── [ 692]  CL.write.1.tlog
│   │           │   ├── [ 294]  custombuild.command.1.tlog
│   │           │   ├── [   2]  custombuild.read.1.tlog
│   │           │   ├── [   2]  custombuild.write.1.tlog
│   │           │   ├── [ 190]  cve.lastbuildstate
│   │           │   ├── [1.4K]  link.command.1.tlog
│   │           │   ├── [3.4K]  link.read.1.tlog
│   │           │   ├── [ 476]  link.write.1.tlog
│   │           │   └── [   0]  unsuccessfulbuild
│   │           ├── [111K]  stdafx.obj
│   │           └── [212K]  vc140.pdb
│   ├── [1.2K]  cve.sln
│   ├── [ 26M]  cve.VC.db
│   ├── [4.0K]  ipch
│   │   ├── [4.0K]  CVE-b2cdb326
│   │   │   ├── [3.4M]  CVE-2980324a.ipch
│   │   │   ├── [3.3M]  CVE-733e7504.ipch
│   │   │   └── [3.4M]  CVE-ae585362.ipch
│   │   └── [4.0K]  CVE-b35bd88e
│   │       ├── [3.3M]  CVE-733e7504.ipch
│   │       └── [3.4M]  CVE-ae585362.ipch
│   └── [4.0K]  Release
│       └── [ 99K]  cve.exe
└── [4.0K]  x64
    ├── [4.0K]  exp
    │   ├── [ 211]  _asm.asm
    │   ├── [ 11K]  exp.cpp
    │   ├── [5.9K]  exp.vcxproj
    │   ├── [1.0K]  exp.vcxproj.filters
    │   └── [4.0K]  x64
    │       └── [4.0K]  Release
    │           ├── [1.1K]  _asm.obj
    │           ├── [ 724]  exp.Build.CppClean.log
    │           ├── [ 432]  exp.log
    │           ├── [169K]  exp.obj
    │           ├── [4.0K]  exp.tlog
    │           │   ├── [ 510]  CL.command.1.tlog
    │           │   ├── [ 20K]  CL.read.1.tlog
    │           │   ├── [ 290]  CL.write.1.tlog
    │           │   ├── [ 190]  exp.lastbuildstate
    │           │   ├── [ 128]  exp.write.1u.tlog
    │           │   ├── [1.2K]  link.command.1.tlog
    │           │   ├── [3.3K]  link.read.1.tlog
    │           │   └── [ 396]  link.write.1.tlog
    │           └── [132K]  vc140.pdb
    ├── [1.2K]  exp.sln
    ├── [ 25M]  exp.VC.db
    └── [4.0K]  x64
        └── [4.0K]  Release
            └── [116K]  exp.exe

18 directories, 68 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!