CVE-2020-17087

This is a working proof-of-concept exploit for CVE-2020-17087, a Windows kernel pool overflow vulnerability in the BCrypt library. The exploit leverages a non-paged pool overflow to achieve arbitrary read/write primitives and ultimately escalate privileges.

This PoC demonstrates a buffer overflow vulnerability in BCryptSetContextFunctionProperty due to improper size handling, leading to a heap overflow in NonPagedPoolNx. The exploit triggers the vulnerability by passing a crafted buffer size that results in an undersized allocation.

This is a proof-of-concept exploit for CVE-2020-17087, a Windows kernel vulnerability in the BCrypt component. The exploit leverages a heap overflow to achieve arbitrary read/write primitives, targeting the SegmentHeap to escalate privileges.

The repository contains a functional proof-of-concept exploit for CVE-2020-17087, a Windows kernel vulnerability in the CNG (Cryptography Next Generation) driver. The exploit demonstrates a heap-based buffer overflow via a maliciously crafted IOCTL request to the CNG device, leading to potential local privilege escalation.