Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2020-11492 — Proof-of-concept exploit for Docker Desktop for Windows privilege escalation (CVE-2020-11492). Uses named pipe impersonation to steal SYSTEM token and spawn elevated process. | Kitploit
Tools/GitHubGitHub/crackercat/cve-2020-11492
Privilege EscalationContainer SecurityVulnerability AnalysisExploitation
GitHubcrackercat/cve-2020-11492

CVE-2020-11492

Proof-of-concept exploit for Docker Desktop for Windows privilege escalation (CVE-2020-11492). Uses named pipe impersonation to steal SYSTEM token and spawn elevated process.

View Repository
2626 years agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2020-11492

Proof-of-Concept (PoC) for Docker Desktop for Windows privilege escalation vulnerability. This vulnerability was patched in Docker version 2.3.0.2 on May 11th, 2020.

This PoC performs the following:

  • creates a named pipe mimicking docker named pipe \\.\\pipe\\dockerLifecycleServer,
  • call ImpersonateNamedPipeClient after connection from docker service,
  • retrieve and duplicate the impersonated access token from the current thread,
  • launch a new process with the token. The new process will run as SYSTEM.

References

  • https://www.pentestpartners.com/security-blog/docker-desktop-for-windows-privesc-cve-2020-11492/
Download Tool