CVE-2025-47987

This exploit triggers a denial-of-service (DoS) in Windows 11 23H2 by crafting a malformed Kerberos certificate logon buffer and passing it to `AcquireCredentialsHandleW`. The PoC constructs an oversized buffer with misaligned fields, leading to an internal error (SEC_E_INTERNAL_ERROR) that crashes the system.

This repository contains a functional proof-of-concept exploit for CVE-2025-47987, targeting a memory corruption vulnerability in the Windows Security Support Provider Interface (SSPI). The exploit constructs a malformed KerbCertLogonBuffer and triggers a crash via AcquireCredentialsHandleW, demonstrating the vulnerability.

This repository contains a functional proof-of-concept exploit for CVE-2025-47987, a heap-based buffer overflow in Windows CredSSP. The exploit leverages integer overflow and heap manipulation to achieve local privilege escalation to SYSTEM.