asepsaepdin/cve-2021-1732Local privilege escalation exploit for CVE-2021-1732, a Win32k vulnerability, allowing attackers to gain SYSTEM privileges on affected Windows versions.
A vulnerability exists within win32k that can be leveraged by an attacker to escalate privileges to those of NT AUTHORITY\SYSTEM. The flaw exists in how the WndExtra field of a window can be manipulated into being treated as an offset despite being populated by an attacker-controlled value. This can be leveraged to achieve an out of bounds write operation, eventually leading to privilege escalation. This flaw was originally identified as CVE-2021-1732 and was patched by Microsoft on February 9th, 2021. In early 2022.
CVE-2021-1732.exe "the-command"
"the-command" Use every command supported by Command Line Interfaces (CLI), such as "whoami"
Download Exploit Script for CVE-2021-3560 Here
Windows Server, version 20H2 (Server Core Installation), Windows 10 Version 20H2, Windows Server, version 2004 (Server Core installation), Windows 10 Version 2004, Windows Server, version 1909 (Server Core installation), Windows 10 Version 1909, Windows Server 2019 (Server Core installation), Windows Server 2019, Windows 10 Version 1809
⚠️ Becareful when running this exploit on your system.