CVE-2016-3225

This Metasploit module exploits CVE-2016-3225, a Windows privilege escalation vulnerability leveraging Net-NTLMv2 reflection via DCOM/RPC to achieve SYSTEM privileges. It uses reflective DLL injection to execute the exploit payload in a target process, requiring the SeImpersonatePrivilege.

This Metasploit module exploits CVE-2016-3225, a Windows Net-NTLMv2 reflection vulnerability in DCOM/RPC, to achieve SYSTEM-level privilege escalation. It uses reflective DLL injection to execute a payload in a spawned notepad.exe process, leveraging the SeImpersonatePrivilege.

This Metasploit module exploits CVE-2016-3225 by leveraging Net-NTLMv2 reflection between DCOM/RPC to achieve a SYSTEM handle for privilege escalation. It uses reflective DLL injection to execute the RottenPotato exploit, which abuses the SeImpersonatePrivilege to escalate privileges.

This repository contains documentation and configuration scripts for a collection of Windows kernel exploits, including CVE-2003-0352, CVE-2006-3439, and others. It includes README files in both Chinese and English, as well as a Python script for generating documentation.