CVE-2023-21746

This repository contains a Local Privilege Escalation (LPE) exploit for CVE-2023-21746, combining NTLM authentication manipulation (LocalPotato) with DLL hijacking via the StorSvc service to achieve SYSTEM privileges on Windows.

This repository contains a functional Cobalt Strike BOF (Beacon Object File) implementation of the LocalPotato NTLM Reflection Exploit for CVE-2023-21746. The code includes COM object implementations, SSPI hooking, and SMB/HTTP clients to trigger the vulnerability.

This repository contains functional exploit code for CVE-2023-21746, a local privilege escalation vulnerability in Windows. The exploit leverages DCOM reflection and NTLM relay techniques to escalate privileges from a low-integrity context to SYSTEM.

This repository contains a functional exploit for CVE-2023-21746, leveraging DCOM and NTLM reflection to achieve local privilege escalation. The code hooks SSPI functions to swap authentication contexts between SYSTEM and the current user, enabling privilege escalation via HTTP and SMB reflection.