Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
KTM_POCS — Reports and POCs for CVE 2024-43570 and CVE-2024-43535 | Kitploit
Tools/GitHubGitHub/jayesther/ktm_pocs
Vulnerability AnalysisExploitationPapers & ResearchLearning & EducationBinary Exploitation
GitHubjayesther/ktm_pocs

KTM_POCS

Reports and POCs for CVE 2024-43570 and CVE-2024-43535

View Repository
3161 year agoReviewed by Kitploit

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

KTM_POCS

This repo contains reports for CVE 2024-43570 and CVE 2024-43535, two vulnerabilities I found in the Windows Kernel Transaction Manager driver tm.sys.

This repo also contains exploit code I used for the demos in the OffensiveCon25 Presentation: Hunting for Overlooked Cookies in Windows 11 KTM and Baking Exploits for Them by Cedric Halbronn and Jael Koh.

Slides for the presentation are available here.

Exploit code was tested on a Windows 11 Pro 23H2 226321.4169 (September Patch Tuesday Update) Virtual Machine

Timeline

24 Apr 2024 - 26 Apr 2024: tm.sys research attempt #1

18 May 2024 - 20 May 2024: tm.sys research attempt #2

14 Jun 2024 - 7 Jul 2024: tm.sys research attempt #3

24 Jun 2024: Reported CVE 2024-43570 to MSRC

7 Jul 2024 : Reported CVE 2024-43535 to MSRC

18 Jul 2024: US$2000 bounty awarded for CVE 2024-43570

5 Oct 2024 : US$2000 bounty awarded for CVE 2024-43535

8 Oct 2024: Fix for CVE-2024-43570 and CVE-2024-43535

Download Tool