CVE-2025-21293

This repository contains a README describing CVE-2025-21293, an elevation of privilege vulnerability in Active Directory Domain Services affecting Windows 10, 11, and Server. The vulnerability allows 'Network Configuration Operators' to execute code with SYSTEM privileges via Windows Performance Counters.

This Metasploit module exploits weak service permissions in Windows to escalate privileges to SYSTEM by either creating a new service, modifying an existing service's configuration, or hijacking a service's executable or registry permissions. It includes multiple techniques such as service creation, file permission manipulation, and registry key modification to achieve local privilege escalation.