Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2023-27470_Exercise — Windows privilege escalation lab that recreates CVE-2023-27470's arbitrary file deletion bug, with vulnerable executable, source, solution, and a mitigated build demonstrating Microsoft's mitigation. | Kitploit
Tools/GitHubGitHub/3lp4tr0n/cve-2023-27470_exercise
Privilege EscalationVulnerability AnalysisExploitationLearning & EducationLabs & Practice
GitHub3lp4tr0n/cve-2023-27470_exercise

CVE-2023-27470_Exercise

Windows privilege escalation lab that recreates CVE-2023-27470's arbitrary file deletion bug, with vulnerable executable, source, solution, and a mitigated build demonstrating Microsoft's mitigation.

View Repository

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share
10833 years agoNot yet reviewed

CVE-2023-27470 EoP via Arbirary File Deletion Exercise

This repository contains a local privilege escalation exercise that replicates CVE-2023-27470. Your mission, should you choose to accept it, find the vulnerability and get a SYSTEM Command Prompt! If you would like the jump to the solution, look at solution.txt. Read more about arbitrary file deletion vulnerabilities and its risks at Deleting Your Way Into SYSTEM: Why Arbitrary File Deletion Vulnerabilities Matter.

Author: Andrew Oliveau (@AndrewOliveau)

Exercise Set Up Instructions

  1. Use a Windows VM configured with 2 processors and 2 cores per processor
  2. Create C:\ProgramData\logs folder with elevated account and add log.txt into it
  3. Run CVE-2023-27470_Exercise.exe with elevated account. If you see "Error opening directory: 3", that is OK. Consider it a hint...

Optional: Create a protected file and/or folder with elevated account to test file deletion

Bonus: Run CVE-2023-27470_Mitigated.exe to test Microsoft's ProcessRedirectionTrustPolicy mitigation policy.

Building Yourself

Should you choose to compile it yourself, use the provided CVE-2023-27470_Exercise.sln Visual Studio project and make sure your are using Windows SDK version 10.0.20348.0.

Download Tool