CVE-2013-0008

This Metasploit module exploits CVE-2013-0008, a Windows kernel vulnerability that allows low-integrity processes to broadcast messages to higher-integrity command prompts, enabling privilege escalation. It uses techniques like spawning a medium-integrity command prompt via Win+Shift+# and broadcasting commands to execute payloads.

This exploit leverages CVE-2013-0008 to drive a Medium Integrity Level (IL) cmd.exe from a Low IL process via message broadcasting. It uses SendMessage with HWND_BROADCAST to inject commands into a privileged cmd.exe spawned by explorer.exe.

This Metasploit module exploits CVE-2013-0008 (MS13-005) to escalate privileges from low to medium integrity on Windows systems by broadcasting commands via HWND_BROADCAST. It supports multiple techniques (WEB, FILE, TYPE) for payload delivery.