ascotbe/kernelhub

:palm_tree:Linux、macOS、Windows Kernel privilege escalation vulnerability collection, with compilation environment, demo GIF map, vulnerability details, executable file (提权漏洞合集)

哈喽大家好:wave:, 这里是钰棽. 由于左边的菜鸡正在学习所以让我介绍他:no_mouth:

👨‍💻他现在干的事情:

• 学习二进制漏洞
• 研究木马相关技术
• 他啥都想学（啥也不会的菜鸡
• 欢迎找我开黑
• 公众号:瓜皮大笨蛋

💚他感兴趣的:

• 宇宙、天体

Let's connect and chat! 📨

               

Open to anything under the stars ✨

Things to know about me!

kernelhub's Issues

Python 3.9 全新环境，依旧报错

python3.7.5也报错，请问大佬的复现环境是什么呢？

README.md中网站错误

在 README.md 和 README.CN.md两个文档中的

参考项目&网站（Reference project & website）

中的“CVE”指向错误。

原因：未使用https/http协议前缀导致错误识别成本目录下的子链接

补充几个缺失的CVE及其exp

您好，我对比了一下Kernel Hub中已有的2019-2021年exp和我爬取到的exp，发现缺失了下面几个win32k的exp，对应的CVE描述和exp链接如下：

CVE-2020-1054

An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1143.

• https://github.com/0xeb-bp/cve-2020-1054
• https://github.com/Iamgublin/CVE-2020-1054
• https://github.com/Graham382/CVE-2020-1054

CVE-2020-1034

An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'.

• https://github.com/yardenshafir/CVE-2020-1034

CVE-2020-0668

An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0669, CVE-2020-0670, CVE-2020-0671, CVE-2020-0672.

• https://github.com/RedCursorSecurityConsulting/CVE-2020-0668

• https://github.com/itm4n/SysTracingPoc

• https://github.com/Nan3r/CVE-2020-0668

CVE-2019-1132

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'.

• https://github.com/Vlad-tri/CVE-2019-1132
• https://github.com/petercc/CVE-2019-1132

CVE-2019-0808

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0797.

• https://github.com/DreamoneOnly/CVE-2019-0808-32-64-exp

CVE-2019-0623

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'.

• https://github.com/DreamoneOnly/CVE-2019-0623-32-exp

关于已经复现的exp

readme中有提及那些cve没有复现,是否可以在readme中列出那些cve(exp)已经复现通过了,包括在哪些平台复现了.

[BUG] A space causes the windows platform to fail to checkout

When I clone this repo

PS G:\windows> git clone https://github.com/Ascotbe/Kernelhub.git
Cloning into 'Kernelhub'...
remote: Enumerating objects: 1563, done.
remote: Counting objects: 100% (1563/1563), done.
remote: Compressing objects: 100% (976/976), done.
remote: Total 1563 (delta 627), reused 1433 (delta 499), pack-reused 0
Receiving objects: 100% (1563/1563), 28.95 MiB | 1.81 MiB/s, done.
Resolving deltas: 100% (627/627), done.
error: invalid path 'CVE-2014-6321 /README.md'    // LOOK AT THIS LINE
fatal: unable to checkout working tree
warning: Clone succeeded, but checkout failed.
You can inspect what was checked out with 'git status'
and retry with 'git restore --source=HEAD :/

When I checkout manually

PS G:\windows\Kernelhub> git checkout HEAD
error: invalid path 'CVE-2014-6321 /README.md'

It looks like an unexpected space in the path causing this problem.