CVE-2014-4076

This is a functional privilege escalation exploit for CVE-2014-4076, targeting Windows 2003 SP2 x86. It leverages a vulnerability in the TCP/IP stack's IOCTL handling to execute arbitrary code in kernel mode, spawning a SYSTEM-level command shell.

This is a detailed technical writeup for CVE-2014-4076, a privilege escalation vulnerability in Microsoft Windows Server 2003 SP2's TCP/IP driver. It includes root cause analysis, crash dump analysis, and exploitation details but does not contain functional exploit code.

This is a C++ rewrite of the original Python exploit for CVE-2014-4076, targeting a privilege escalation vulnerability in Windows 2003's tcpip.sys driver. It leverages a kernel memory corruption bug to escalate from Administrator to SYSTEM by sending a crafted IOCTL request.

This Metasploit module exploits a NULL pointer dereference in the Microsoft TCP/IP driver (tcpip.sys) via a crafted IOCTL request to elevate privileges to SYSTEM on Windows Server 2003 SP2. It includes token-stealing shellcode and memory manipulation to trigger the vulnerability.