Skip to content

Instantly share code, notes, and snippets.

View n1f2c3's full-sized avatar
😈
Code well and stay away from werewolf killing

且行且珍惜 n1f2c3

😈
Code well and stay away from werewolf killing
  • 可别
  • 健康
View GitHub Profile
@QiuhaoLi
QiuhaoLi / poc.c
Created March 28, 2022 11:11
PoC for CVE-2021-41073 (type confusion in Linux io_uring)
/*
* PoC for CVE-2021-41073, tested on Debian 11 with Linux 5.14
* For writeup and exp visit https://www.graplsecurity.com/post/iou-ring-exploiting-the-linux-kernel
* For liburing visit https://github.com/axboe/liburing
* gcc -static -o poc poc.c -luring && ./poc
*/
#include <fcntl.h>
#include <stdio.h>
#include <string.h>
function Invoke-UACBypass {
<#
.SYNOPSIS
Bypasses UAC on Windows 10 by abusing the SilentCleanup task to win a race condition, allowing for a DLL hijack without a privileged file copy.
Author: Matthew Graeber (@mattifestation), Matt Nelson (@enigma0x3)
License: BSD 3-Clause
Required Dependencies: None
Optional Dependencies: None