EIP-2026-117387

This exploit demonstrates a local buffer overflow in KiTTY Portable <= 0.65.0.2p via a crafted kitty.ini file, leveraging a Wow64 egghunter to achieve remote code execution on Windows 7 Pro x64. The exploit bypasses ASLR/DEP by manipulating registers (EDI/EDX) to copy shellcode to the stack and execute it via a RET instruction.