CVE-2017-9769

This Metasploit module exploits CVE-2017-9769, a local privilege escalation vulnerability in Razer Synapse's rzpnk.sys driver. It leverages an IOCTL handler flaw to open a handle to winlogon.exe and inject shellcode, achieving SYSTEM privileges.

This repository contains a proof-of-concept exploit for CVE-2017-9769, which leverages a vulnerable IOCTL in the Razer Synapse driver (rzpnk.sys) to open a handle to an arbitrary process via ZwOpenProcess. The exploit demonstrates privilege escalation by obtaining a handle to the current process with elevated permissions.

This Metasploit module exploits a vulnerability in the Razer Synapse driver (rzpnk.sys) by leveraging an IOCTL handler that allows arbitrary process handle opening. It escalates privileges to SYSTEM by injecting shellcode into the winlogon process and triggering execution via LockWorkStation.