search

ynwarcs / CVE-2023-24871

pocs & exploit for CVE-2023-24871 (rce + lpe)
44 stars 13 forks source link

Recreation #1

Closed ckbadgujar2003 closed 4 months ago

ckbadgujar2003 commented 4 months ago

how to proceed with recreating the vulnerability in virtual machine??

ynwarcs commented 4 months ago

what do you mean by recreating? do you want to try the rce case or the poc case? in both cases, you'll need a virtual machine with a windows build that's older than March 2023 (and not updated). then you can follow the steps in the README. if there's something specific that's unclear, let me know and I can give more details.

ckbadgujar2003 commented 4 months ago

i am trying to recreate the vulnerability in my windows virtualbox vm (the build is compatible). i have confirmed the vulnerability in my vm. but for the exploitation of the vulnerability, i cant proceed with recreating the 4 necessary modules (exe and dll). could you provide me the code or at least the guidelines for the further procedure...

ynwarcs commented 4 months ago

indeed, the exploit code was missing. I don't know why, I thought I'd included it in the first commit but I guess not. I've published it now under lpe/exploit. You just need to run bthlpe_master.exe with no command line arguments.

ckbadgujar2003 commented 4 months ago

Thanks a lot!