CVE-2023-38817

This repository contains a functional exploit for CVE-2023-38817, leveraging a vulnerable signed driver to achieve kernel-mode read/write memory operations from user-mode. The exploit uses MmCopyVirtualMemory and lacks proper access control over its IOCTLs, enabling privilege escalation.

This is a functional exploit for CVE-2023-38817, demonstrating a local privilege escalation (LPE) via arbitrary kernel memory read/write operations. The code interacts with a vulnerable driver (EchoDrv) to escalate privileges by overwriting the current process's token with the system token.