CVE-2023-28252

This repository provides a detailed technical analysis of CVE-2023-28252, a privilege escalation vulnerability in the Windows Common Log File System (CLFS) driver. It includes a step-by-step breakdown of the exploitation process, patch analysis, and references to related research, but does not contain functional exploit code.

This repository contains a functional exploit for CVE-2023-28252, a privilege escalation vulnerability in the Windows CLFS (Common Log File System) driver. The exploit leverages memory corruption to escalate privileges and execute arbitrary code, with modifications to support additional Windows versions and direct binary execution.

This repository contains a functional exploit PoC for CVE-2023-28252, targeting the Common Log File System (CLFS) driver in Windows. The exploit leverages memory corruption to achieve local privilege escalation (LPE) by manipulating CLFS structures and abusing kernel addresses.

This repository contains a precompiled binary for CVE-2023-28252, a local privilege escalation (LPE) vulnerability in Windows Common Log File System (CLFS). The binary is a modified version of Fortra's PoC, allowing arbitrary payload execution as NT AUTHORITY\SYSTEM.

This repository provides a technical analysis and visualization of the CVE-2023-28252 vulnerability, a Windows privilege escalation flaw in the Common Log File System (CLFS). It references external articles and includes diagrams to explain the exploit workflow but does not contain functional exploit code.

The repository contains a vague README in Russian describing file creation detection for CVE-2023-28252 without providing actual exploit code or technical details. It lacks depth and appears to be a placeholder or lure.

The repository contains a functional exploit for CVE-2023-28252, a Windows local privilege escalation vulnerability. The code includes token manipulation and CRC32 computation, targeting the CLFS (Common Log File System) driver to escalate privileges to SYSTEM.

This Metasploit module exploits a privilege escalation vulnerability in the Windows Common Log File System (clfs.sys) driver by manipulating .blf files to trigger an out-of-bounds read and overwrite a process token with a SYSTEM token. It uses a controlled memory space created via pipe allocation and deallocation to achieve local privilege escalation.