Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2024-38063 — Final Project in Fundamental network security,POC CVE-202438063 | Kitploit
Tools/GitHubGitHub/avidanmaatuk/cve-2024-38063
Vulnerability AnalysisExploitationNetwork SecurityLearning & EducationBinary ExploitationLabs & Practice
GitHubavidanmaatuk/cve-2024-38063

CVE-2024-38063

Final Project in Fundamental network security,POC CVE-202438063

View Repository
117 months agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2024-38063 — Windows IPv6 Stack Vulnerability (Analysis & PoC)

Topic Focus Severity

Technical analysis and Proof-of-Concept (PoC) for CVE-2024-38063, a critical Remote Code Execution (RCE) vulnerability in the Windows IPv6 stack (tcpip.sys). Discovered by KunLun Lab, this issue is zero-click, meaning it can be triggered by specially crafted packets without user interaction.

Academic context: Final project for the “Foundations of Network Security” course.

Table of Contents

  • Overview
  • Technical Summary
  • Repository Contents
  • Lab Setup
  • PoC Logic (High-Level)
  • Usage
  • Mitigation
  • Disclaimer

Overview

This repository contains:

  • a structured analysis of the vulnerability,
  • a PoC demonstration using Scapy,
  • and full course documentation and lab instructions.

Technical Summary

The core issue is an integer underflow in tcpip.sys during parsing of IPv6 Extension Headers within fragmented traffic.

  • Logic failure: header length validation fails during calculation.
  • Memory corruption: underflow leads to a buffer overflow and unsafe memory writes.
  • Impact: potential BSOD and RCE under specific conditions.

Repository Contents

  • CVE-2024-38063 Analysis.pdf — Slides covering background, root cause, and mitigations.
  • CVE-2024-38063.py — Scapy-based PoC script (demonstrates crash behavior).
  • WriteUP.pdf — Full write-up, lab requirements, and execution notes.

Lab Setup

To reproduce the environment in a controlled, educational lab:

  • Victim: Windows 10/11 prior to Aug 2024 patch / 24H2, IPv6 enabled.
  • Attacker: Linux VM with Python 3, Scapy.
  • Network: IPv6 connectivity between both machines on the same network segment.

PoC Logic (High-Level)

The PoC crafts a sequence of packets to trigger the underflow:

  1. Destination Options with an unrecognized option type to push error-handling paths.
  2. Fragment 1 to start fragmentation and provide payload.
  3. Fragment 2 to terminate the sequence.

The script repeats these batches while varying the Hop Limit to increase the probability of encountering the vulnerable parsing path.

Usage

  1. Identify the target IPv6 address.
  2. Update ip_addr and iface in CVE-2024-38063.py.
  3. Run the script from the attacker machine:
root@kitploit:~
pip install scapy
pip install getmac
python3 CVE-2024-38063.py

If the target is vulnerable, a BSOD typically occurs within 30–60 seconds as the kernel processes malformed headers.

Mitigation

  • Apply security updates: Microsoft patch (Aug 13, 2024).
  • Disable IPv6 where patching is not possible.
  • Firewall filtering: block fragmented IPv6 packets at the perimeter.

Disclaimer

This project is for educational and research purposes only. Unauthorized testing or access to systems you do not own or have explicit permission to assess is illegal. The authors assume no responsibility for misuse.

Download Tool