0xeb-bp/cve-2020-1054

LPE for CVE-2020-1054 targeting Windows 7 x64

cve-2020-1054's Issues

oh!

Why I fail?

Windows 7 Ultimate x64 ,6.1.7601 Service Pack 1 Build 7601 in VMware
Why I filed?

CVE-2020-1054 LPE written by @0xeb_bp

[+] Pid = 2804
[+] Token Handle = 48
[+] PID Token Address = fffff8a00379aa30
[+] PID Token Privilege Address = fffff8a00379aa70
[+] Base Bitmap Handle = fffffffffc050890
[+] Base Bitmap Surface Obj Address = fffff900c4c00000
[+] Generating Bitmaps...
[-] Ran out of memory allocating Bitmaps

What's your test environment ?

Hi, I run the exploitation code but it failed. It show me that "Error finding winlogin.exe pid".

Hi, I run the code as your description on windows 7 x64 ultimate.
But it failed at "Error finding winlogin.exe pid".

CVE-2020-1054 LPE written by @0xeb_bp

[+] Pid = 2664
[+] Token Handle = 48
[+] PID Token Address = fffff8a00b2aba30
[+] PID Token Privilege Address = fffff8a00b2aba70
[+] Base Bitmap Handle = 360501e4
[+] Base Bitmap Surface Obj Address = fffff900c6800000
[+] Generating Bitmaps...
[+] Surf Obj to OOB overwrite the size = fffff901c6870000
[+] Surf Obj to overwrite pvScan01 = fffff901c68e0000
[+] GetBitMapBits/Reading using oob_target...
[+] SetBitmapBits/Overwriting pvScan0...
[+] Overwrote pvScan01 (SetBitmapBits returned 6f000 bytes)
[+] Overwriting token priviliges
[+] Overwrote token privileges (SetBitmapBits returned 18 bytes)
[+] Searching for winlogon.exe PID
[-] Error finding winlogin.exe pid

Could you please tell me how to fix this problem?
Thanks.