CVE-2018-8897

This Metasploit module exploits CVE-2018-8897, a local privilege escalation vulnerability in Windows caused by mishandling of #DB exceptions deferred by MOV SS or POP SS instructions. It uploads a pre-compiled exploit binary and payload to the target system, then executes them to achieve elevated privileges.

The provided content is a description of a PoC for CVE-2018-8897 but lacks actual exploit code, instead pointing to an external download link. This is characteristic of suspicious repositories that lure researchers into downloading potentially malicious files.

This is a working proof-of-concept exploit for CVE-2018-8897, a local privilege escalation vulnerability in Windows. The exploit manipulates the interrupt stack to gain kernel-mode execution and escalate privileges by replacing the current process token with the system token.

This is a functional local privilege escalation (LPE) exploit for CVE-2018-8897, leveraging the POP/MOV SS vulnerability via SYSCALL to gain SYSTEM privileges. The exploit manipulates kernel structures to disable SMEP, steal the system token, and disable DSE (Driver Signature Enforcement).

This PoC demonstrates CVE-2018-8897, a local DoS vulnerability in Windows caused by a spurious debug exception when using POP/MOV SS instructions. It triggers a bugcheck by manipulating hardware breakpoints on the SS selector.

This PoC exploits CVE-2018-8897, a vulnerability in the POP SS instruction handling in Intel CPUs, allowing local privilege escalation by manipulating the SS register during a debug exception. The code tests for vulnerability by triggering specific instructions (int3, syscall) and monitoring register behavior via ptrace.

This Metasploit module exploits CVE-2018-8897, a local privilege escalation vulnerability in Windows caused by mishandling of #DB exceptions deferred by MOV SS or POP SS instructions. It uploads a pre-compiled exploit to execute a payload, gaining elevated privileges.