CVE-2011-1249 PoC — Microsoft Windows 'AFD.sys'驱动程序特权提升漏洞

Source

https://github.com/h3x0v3rl0rd/CVE-2011-1249

Associated Vulnerability

Title:Microsoft Windows 'AFD.sys'驱动程序特权提升漏洞 (CVE-2011-1249)
Description:The Ancillary Function Driver (AFD) in afd.sys in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly validate user-mode input, which allows local users to gain privileges via a crafted application, aka "Ancillary Function Driver Elevation of Privilege Vulnerability."

Readme

# CVE-2011-1249
🖥️ -h3x0v3rl0rd-
#### Microsoft Windows (x86) - 'afd.sys' Local Privilege Escalation (MS11-046)

	apt install mingw-w64
	i686-w64-mingw32-gcc 40564.c -o newshell.exe -lws2_32
  
![image](https://user-images.githubusercontent.com/66146701/125174645-4f214080-e173-11eb-89f8-c699cc7b31d0.png)

![image](https://user-images.githubusercontent.com/66146701/125174669-8ee82800-e173-11eb-9a0a-1761e20c2e8e.png)

File Snapshot


 [4.0K]  /data/pocs/aad23ad2a0fd18ee3557561a56d1d5a27dfefba9
├── [ 32K]  40564.c
└── [ 425]  README.md

0 directories, 2 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →