
Local Windows kernel privilege escalation exploit for CVE-2018-8611 (KTM UAF) using write-what-where and increment primitives.
This is my PoC privilege escalation exploit for CVE-2018-8611, I wrote this exploit while studying ost2 windows kernel exploitation course I really enjoyed the course and how it takes a step by step approach and the examples they provide, and so this is my very own version of the exploit I tried to not copy paste the exploit code provided, and though had to spent hours debugging weird kernel bugs, but I was sure I am going to finish it anyways so I kept going :D
This exploit implements both ways the simpler way by overwriting the PreviousMode field using
the write 0 primitive, and the increment primitive technique, if you just the exploit with -w
it will use the write0 primitie, otherwise increment primitive is the default.