CVE-2017-18019

This PoC demonstrates a memory corruption vulnerability in K7 Total Security's K7Sentry driver by sending an invalid kernel pointer via an IOCTL request, leading to a PAGE_FAULT_IN_NONPAGED_AREA crash. The exploit triggers a read operation on an arbitrary memory address, potentially allowing information leakage or further exploitation.

This PoC exploits CVE-2017-18019, a vulnerability in the K7Sentry.sys driver, to achieve local privilege escalation (LPE) by manipulating kernel thread objects and memory structures. The code demonstrates handle leakage, kernel address retrieval, and preparation for a ROP attack.