yardenshafir/cve-2020-1034PoC que demonstra o uso de cve-2020-1034 para escalonamento de privilégios
PoC demonstrando o uso do cve-2020-1034 para escalada de privilégios. Testado no Windows 10 2004 sem patch, build 19041.488.
A vulnerabilidade foi descoberta pela Microsoft e corrigida na patch Tuesday de 8/9/2020: https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2020-1034
Parte 1: https://windows-internals.com/exploiting-a-simple-vulnerability-in-35-easy-steps-or-less
Parte 1.5 - vazamento de informações: https://windows-internals.com/exploiting-a-simple-vulnerability-part-1-5-the-info-leak/
Parte 2 - https://windows-internals.com/exploiting-a-simple-vulnerability-part-2-what-if-we-made-exploitation-harder/
