Exploitation Summary
CVE-2023-21746 has been observed exploited in the wild (reported by VulnCheck KEV). EIP tracks 4 public exploits from researchers including Muhammad-Ali007, TailoredSecOps, velikrgl.
AI-analyzed exploit summary This repository contains a Local Privilege Escalation (LPE) exploit for CVE-2023-21746, combining NTLM authentication manipulation (LocalPotato) with DLL hijacking via the StorSvc service to achieve SYSTEM privileges on Windows.
Description
Windows NTLM Elevation of Privilege Vulnerability
Exploits (4)
This repository contains a Local Privilege Escalation (LPE) exploit for CVE-2023-21746, combining NTLM authentication manipulation (LocalPotato) with DLL hijacking via the StorSvc service to achieve SYSTEM privileges on Windows.
This repository contains a functional Cobalt Strike BOF (Beacon Object File) implementation of the LocalPotato NTLM Reflection Exploit for CVE-2023-21746. The code includes COM object implementations, SSPI hooking, and SMB/HTTP clients to trigger the vulnerability.
This repository contains functional exploit code for CVE-2023-21746, a local privilege escalation vulnerability in Windows. The exploit leverages DCOM reflection and NTLM relay techniques to escalate privileges from a low-integrity context to SYSTEM.
This repository contains a functional exploit for CVE-2023-21746, leveraging DCOM and NTLM reflection to achieve local privilege escalation. The code hooks SSPI functions to swap authentication contexts between SYSTEM and the current user, enabling privilege escalation via HTTP and SMB reflection.
References (1)
Scores
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H