CVE-2015-0096

This exploit leverages a vulnerability in Windows Shell32.dll where a maliciously crafted .LNK file can trigger arbitrary code execution via LoadLibraryW. The PoC demonstrates the exploit by loading a DLL from a controlled path, as shown in the debug output.

This Metasploit module exploits CVE-2015-0096 by generating a malicious .LNK file that loads a DLL from an SMB share, achieving remote code execution. It leverages a vulnerability in the MS10-046 patch to abuse Windows Shortcut file handling.

This Metasploit module exploits CVE-2017-8464, a variant of CVE-2015-0096, by creating a malicious .LNK file that loads a DLL from a crafted Control Panel applet, achieving local privilege escalation on Windows systems.

This Metasploit module exploits CVE-2017-8464, a vulnerability in Windows LNK file handling, by generating a malicious .LNK file that loads a DLL from a specified path, achieving remote code execution. It bypasses the CPL whitelist by using a SpecialFolderDataBlock with a Control Panel folder ID.

This Metasploit module exploits CVE-2015-0096 by generating a malicious .LNK file and a DLL payload to achieve remote code execution via improper handling of Windows Shortcut files. It leverages a vulnerability in the MS10-046 patch to load a malicious DLL from a UNC path.