3 ms·
The first line in the README: > Windows x64 kernel-mode handcrafted shellcode to replace primary access token of executing process with SYSTEM process token fo
by 3np 4y ago
The first line in the README:
> Windows x64 kernel-mode handcrafted shellcode to replace primary access token of executing process with SYSTEM process token for Elevation of Privilege(EoP).
So yes, privilege escalation.
- Perolan2 4y agoNo, not just privilege escalation. This is shellcode that needs to be inserted into a vulnerable driver, as it has to run from kernel space. Being privileged isn’t enough to run this function.