Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
eop24-26229 — A firebeam plugin that exploits the CVE-2024-26229 vulnerability to perform elevation of privilege from a unprivileged user | Kitploit
Tools/GitHubGitHub/cracked5pider/eop24-26229
Privilege EscalationExploitationPost-ExploitationPayload DevelopmentArchived
GitHubcracked5pider/eop24-26229

eop24-26229

A firebeam plugin that exploits the CVE-2024-26229 vulnerability to perform elevation of privilege from a unprivileged user

View Repository
41112 years agoReviewed by Kitploit

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

Firebeam CVE-2024-26229 plugin

A small firebeam (kaine's risc-v vm) plugin to exploit the CVE-2024-26229 vulnerability that utilizes a vulnerable IOCTL in csc.sys.

The vulnerability is used to get kernel R/W memory access to corrupt the KTHREAD->PreviousMode and then to leveraging DKOM to achieve LPE by copying over the token from the system process over to the current process token.

preview

The installation can be done automatically via the Havoc client plugin store and or manually installed by git cloning it into the havoc client plugin directory:

root@kitploit:~
git clone https://github.com/Cracked5pider/eop24-26229 ~/.havoc/client/plugins/eop24-26229

credits

  • original CVE-2024-26229 repo
  • Eric Egsgard Talk at OffensiveCon24 (video)
Download Tool