
Kode Eksploitasi CVE-2024-38063
This is a PoC (somewhat unstable) for CVE-2024-38063, RCE in tcpip.sys patched on August 13, 2024.
pip3 install scapy
Modify the fields in the script:
iface <- If you have multiple adapters, you need to choose which one to use to send packets. For example, "eth0" on Linux or "Hyper-V Virtual Ethernet Adapter" on Windows. If you are using the default interface, leave it empty.ip_addr <- IP address of the target system (IPv6)num_tries & num_batches <- How many different batches of packets to send. More packet batches = more heap corruption caused + higher likelihood of triggering the vulnerability.mac_addr <- Leave it empty, unless scapy complains it cannot find the MAC address.Run the script:
python3 cve-2024-38063.py