CVE-2024-21111

This exploit leverages a privilege escalation vulnerability in VirtualBox 7.0.16 by manipulating directory junctions and DosDevice symlinks to escalate privileges. It involves creating and deleting junctions, triggering the VBoxSDS service, and manipulating the Config.Msi directory.

This repository contains functional exploit code for CVE-2024-21111, a local privilege escalation vulnerability in Oracle VirtualBox prior to 7.0.16. The exploit leverages symbolic link following to achieve arbitrary file deletion and movement, allowing an attacker to escalate privileges to NT AUTHORITY\SYSTEM.

The repository contains no actual exploit code, only a README pointing to external binaries built from another source. It lacks technical details about the vulnerability and instead directs users to prebuilt binaries, which is a common tactic for distributing malware or fake exploits.

This repository contains a functional exploit PoC for CVE-2024-21111, targeting VirtualBox's VBoxSDS service. The exploit leverages directory junction and symbolic link manipulation to achieve arbitrary file deletion, demonstrating a local privilege escalation (LPE) vulnerability.