CVE-2017-17099

This Metasploit module exploits an unauthenticated SEH-based buffer overflow in SyncBreeze Enterprise v10.1.16 via a maliciously crafted GET request. It overwrites the SEH record with a POP,POP,RET pointer from libspp.dll and executes arbitrary code under the NT AUTHORITY\SYSTEM account.

This repository contains functional exploit code for CVE-2016-10709, targeting the HackSys Extreme Vulnerable Driver (HEVD) with a stack overflow vulnerability. The exploit includes shellcode for token stealing and privilege escalation on Windows 10 x64 systems.