CVE-2023-29336

This exploit leverages a Win32k elevation of privilege vulnerability (CVE-2023-29336) by manipulating menu structures and memory corruption to achieve token stealing, ultimately escalating privileges to SYSTEM. The code includes shellcode execution and memory manipulation techniques.

This repository contains a functional proof-of-concept exploit for CVE-2023-29336, a Win32k local privilege escalation vulnerability. The exploit leverages memory corruption in the Win32k component to escalate privileges to SYSTEM by manipulating menu structures and kernel objects.

The repository contains functional exploit code for multiple CVEs, including CVE-2023-29336, which demonstrates a network-based attack using crafted IPv6 ESP fragments. The PoC for CVE-2022-36537 includes a malicious JDBC driver that executes arbitrary commands, indicating a working exploit for RCE.