CVE-2026-24291

This repository contains a functional exploit for CVE-2026-24291, leveraging a Windows registry symlink vulnerability to manipulate registry keys. The exploit uses an oplock on a system file and registry manipulation to achieve privilege escalation.

The repository claims to be a local privilege escalation exploit for CVE-2026-24291 but lacks actual exploit code in the provided files. The README directs users to download an executable from GitHub releases, which is a common tactic for distributing malware.

This repository contains a functional exploit for CVE-2026-24291, which leverages a registry manipulation vulnerability to achieve local privilege escalation (LPE) on Windows systems. The exploit includes a Go-based payload that creates a local administrator account and a C# tool (RegPwn) that manipulates registry keys to trigger the vulnerability.

This repository contains a functional Brute Ratel C4 BOF (Beacon Object File) exploit for CVE-2026-24291, which leverages a registry symlink race condition in Windows Accessibility ATConfig to escalate privileges. The exploit targets the `msiserver` service's `ImagePath` to achieve local privilege escalation on unpatched Windows systems.