CVE-2021-40449

This is a working exploit for CVE-2021-40449, a use-after-free (UAF) vulnerability in the Windows Win32k driver. The PoC leverages a printer driver callback to trigger the UAF and then sprays palettes to reclaim freed memory, ultimately achieving privilege escalation by manipulating a forged BitMapHeader to enable all privileges.

This exploit targets CVE-2021-40449, a use-after-free (UAF) vulnerability in the Windows kernel printer driver. It manipulates palette objects to trigger the UAF and achieve privilege escalation by corrupting kernel memory.

This is a proof-of-concept exploit for CVE-2021-40449, targeting a use-after-free vulnerability in the Windows graphics driver. It leverages the Microsoft XPS Document Writer driver to achieve arbitrary code execution via a crafted palette object and shellcode execution.

This exploit leverages a use-after-free (UAF) vulnerability in the Windows kernel to escalate privileges by manipulating a BitMapHeader structure and abusing NtSetInformationThread. It ultimately spawns a shell with elevated privileges.

This PoC exploits CVE-2021-40449, a use-after-free vulnerability in the Windows Print Spooler service, by manipulating printer driver callbacks and heap spraying to achieve local privilege escalation (LPE). The code hooks the DrvEnablePDEV function to trigger a UAF condition via ResetDCA and leverages heap grooming techniques.

This is a working proof-of-concept exploit for CVE-2021-40449, targeting a use-after-free vulnerability in the Windows Print Spooler service. The exploit uses printer driver hooking and palette spraying to achieve local privilege escalation.

This Metasploit module exploits a use-after-free vulnerability in the `NtGdiResetDC()` function of Win32k to achieve local privilege escalation to `NT AUTHORITY\SYSTEM`. The exploit leverages a race condition during a user mode callback to manipulate kernel memory and execute arbitrary code.

This repository contains a functional exploit PoC for CVE-2021-40449, a Windows kernel vulnerability. The exploit disables SMEP/SMAP, manually maps a driver, and executes arbitrary code by leveraging a use-after-free (UAF) vulnerability in the Windows printer driver subsystem.

This repository contains a functional exploit for CVE-2021-40449, a use-after-free (UAF) vulnerability in the Windows GDI component (NtGdiResetDC). The exploit leverages memory corruption to achieve local privilege escalation (LPE) by manipulating kernel objects and executing shellcode.

This repository contains a functional exploit for CVE-2021-40449, leveraging a use-after-free (UAF) vulnerability in the Windows kernel via palette manipulation and printer driver callbacks. The exploit targets specific Windows 10 builds (14393 and 17763) and demonstrates memory corruption through crafted palette objects.

This repository contains documentation and configuration scripts for a collection of Windows kernel exploits, including CVE-2003-0352, CVE-2006-3439, and others. It includes Python scripts for generating documentation and organizing exploit metadata, but no actual exploit code for CVE-2021-40449.