CVE-2018-5701

This exploit leverages a vulnerability in the System Mechanic driver (amp.sys) to perform arbitrary read/write operations in kernel memory via crafted IOCTL calls. It demonstrates both reading and writing QWORD values to arbitrary addresses, which can be used for privilege escalation or other kernel-level exploits.

This exploit targets a privilege escalation vulnerability in System Shield AntiVirus & AntiSpyware by manipulating registry permissions and token addresses to escalate privileges. It leverages the vulnerable driver `amp.sys` to achieve arbitrary write access.