CVE-2023-34312

This repository contains a Rust-based PoC for CVE-2023-34312, a local privilege escalation vulnerability in Tencent QQ/TIM's QQProtect.exe. The exploit leverages arbitrary address write vulnerabilities in QQProtect.exe and QQProtectEngine.dll to achieve SYSTEM-level command execution via DLL injection.

This repository provides a proof-of-concept exploit for CVE-2023-34312, targeting QQ and TIM applications by leveraging DLL hijacking via QQProtect.exe. The exploit requires placing a malicious DLL in the same directory as QQProtect.exe to achieve arbitrary code execution.