CVE-2016-0099

This Metasploit module exploits CVE-2016-0099, a privilege escalation vulnerability in Windows Secondary Logon Service due to improper handle sanitization. It leverages PowerShell to execute a payload and elevate privileges on affected Windows systems (7-10, 2k8-2k12).

This is a C# implementation of a local privilege escalation exploit for CVE-2016-0099 (MS16-032), targeting Windows 7-10 and Server 2008-2012. It leverages PowerShell runspace to bypass execution restrictions and escalate privileges via a secondary logon token manipulation vulnerability.

This PowerShell script exploits CVE-2016-0099 (MS16-032), a local privilege escalation vulnerability in Windows. It leverages a race condition in the Secondary Logon Service to impersonate a SYSTEM token, granting elevated privileges.

This exploit leverages CVE-2026-0099 to escalate privileges to Local System by duplicating a thread handle from the Secondary Logon service into a user process. It uses CreateProcessWithLogonW with LOGON_NETCREDENTIALS_ONLY to bypass authentication requirements and then manipulates thread tokens to achieve elevation.

This repository contains a functional exploit for CVE-2016-0099 (MS16-032), which leverages a leaked thread handle to achieve local privilege escalation (LPE) on Windows systems. The exploit uses NtImpersonateThread to impersonate a SYSTEM thread and execute commands with elevated privileges.

This Metasploit module exploits CVE-2016-0099, a privilege escalation vulnerability in Windows Secondary Logon Service due to improper handle sanitization. It leverages PowerShell to execute a payload and elevate privileges on vulnerable systems.

This repository is a documentation hub for various Windows kernel exploits, including CVE-2003-0352, CVE-2006-3439, CVE-2008-1084, and others. It contains README files with technical details and a Python script for generating documentation, but no functional exploit code for CVE-2016-0099.