CVE-2024-30088

This repository contains a Proof of Concept (PoC) written in Python for the vulnerability CVE-2024-30088. This code is an attempt to replicate the vulnerability as a technical exercise, with purely educational and demonstrative purposes, showing how Python somehow "struggles" also in this field. I use the ctypes library to define low-level data structures in Python.

CVE-2024-30088 is an Elevation of Privilege (LPE) vulnerability affecting the Windows kernel. The exploit requires low-level operations that are normally not well supported in Python, a high-level language known for its abstraction and automatic memory management via Garbage Collection (GC).

This "proof of concept" shows how, despite the language's limitations, it is possible to interact with the Windows kernel and manipulate processes at a low level using Python. It should be noted that the use of techniques such as direct memory manipulation and process management at the kernel level are intrinsically complex and can entail risks for system stability.

Note: The original exploit code is written in C++. To achieve LPE it is recommended to use that one; this variant can cause a BSOD, crash, etc. for the reasons listed above.

Original PoC: https://github.com/tykawaii98/CVE-2024-30088