Build instructions

[edermi]

Hi,

thanks for the exploit. May it be possible to add build instructions?

Thanks!

[can1357]

Simply dropping all files in a solution and compiling with x64|Release works for me with MSVC. Let me know if you run into any issues, I can also add a solution file if needed.

[edermi]

I'm using Visual Studio Community 2017. File > New Project > Visual C++ > Empty Project I added your header files in the solution explorer to "Header Files" and Main.cpp and Native.asm to "Source Files". Building the project for x64|Release gives me 22 unresolved external symbols (the asm functions, e.g. __readss).

Thanks for your help!

[can1357]

Right-click on your project, go to Build Dependencies and click on Build Customizations.... Enable masm(.targets, .props) and click OK. Then right-click on Native.asm, go to Properties and set the item type to Microsoft Macro Assembler. This should solve your problem.

[can1357]

On another note, to make sure you don't bugcheck:

• Disable Properties>C/C++>Code Generation>Security Check (/GS-)
• Disable Properties>C/C++>Code Generation>Control Flow Guard
• Make sure you compile in release mode
• Do not launch with the debugger

[edermi]

Works fine, thanks for your help and the tips to improve reliability!

[Malayke]

Hi can1357, I failed to compile with VS2017, what version of MSVC r u using?

[can1357]

VS2017 as well

[Malayke]

it's work, thx. I run the output exe file and got some error:

C:\Users\x\source\repos\CVE-2018-8897\x64\Release>CVE-2018-8897.exe

[[[[[[        Assert Failed: !KvaInfo.KvaShadowFlags.KvaShadowEnabled        ]]]]]]

[can1357]

@Malayke read the error?