CVE-2013-1300

This is a Metasploit module for CVE-2013-1300, a kernel pool overflow in Win32k allowing local privilege escalation. It injects a reflective DLL into a process to exploit the vulnerability and migrate into winlogon.exe for SYSTEM privileges.

This repository contains a non-working exploit stub for CVE-2013-1300, a Windows kernel vulnerability. The code attempts to exploit a handle table corruption issue but is incomplete and lacks critical functionality.

This Metasploit module exploits a kernel pool overflow in Win32k (CVE-2013-1300) to achieve local privilege escalation by nulling the ACL of winlogon.exe, allowing migration to a SYSTEM process. It uses reflective DLL injection and was originally used in Pwn2Own 2013.