CVE-2024-30090 - LPE PoC

CVE-2024-30090 found by Angelboy with DEVCORE.

Parent.cpp

Get the ntoskrnl base by using NtQuerySystemInformation (medium-integrity) - Compile as x64.

Child.cpp

The exploit for CVE-2024-30090 - Compile as x86.

Thanks

Big thanks Angelboy for your help and guidance!.
Cedric Halbronn 'OST2 - Exploitation 4011 - Windows Kernel Exploitation' - winhelpers.h.
bruno-1337 - SeDebugPrivilege-Exploit.

Resources & References

1. Streaming vulnerabilities from Windows Kernel - Proxying to Kernel - Part I
2. Streaming vulnerabilities from Windows Kernel - Proxying to Kernel - Part II
3. Streaming vulnerabilities from Windows Kernel - Proxying to Kernel - CVE-2024-30090