Scholarlink

In this poster, we present an exploit technique using an integer overflow turned out-of-bounds write inside the paged pool to escalate our privileges on the latest Windows 11 version 24H2. We describe our exploitation strategy and demonstrate how we used it to carry out the exploit. We also identify some future technical directions that could improve this exploit technique.

错误：搜索内容不能为空，请输入英文关键词
错误：关键词超出字数限制，请精简
高级检索

Poster: Referencing Your Privileges – A Data-Only Exploit Technique for the Windows Kernel

  • 会议论文

  • 发表日期：

    2025年

查看全文
  • Nicola Stauffer,
  • Gürkan Gür

摘要

In this poster, we present an exploit technique using an integer overflow turned out-of-bounds write inside the paged pool to escalate our privileges on the latest Windows 11 version 24H2. We describe our exploitation strategy and demonstrate how we used it to carry out the exploit. We also identify some future technical directions that could improve this exploit technique.