刚刚捞到的提权0DAY,亲测2K3成功.

2013-06-30
工具
7 条评论
6.34K次阅读

不多说上图：

windows 提权0day

下载地址：EPATHOBJExploit

转载请注明来自WebShell'S Blog，本文地址：https://www.webshell.cc/4381.html

0day epathobjexploit 提权

已有 7 条评论

HR

2017/08/10 14:22

大兄弟出个教程啊

回复
1

2013/08/19 23:49

1

回复
helen

2013/08/17 15:29

测试了然后服务器直接挂了也不知道加得用户没有

回复
net

2013/07/13 16:02

这个是利用的哪个漏洞？

回复
ODAY测试结果1JHJKH

2013/06/30 17:28

the win32k.sys EPATHOBJ 0day exploit********************************************************************** exploit by: ****** 0day finder: ****** tested system:xp/2003/win7/2008 (*32bit*) **********************************************************************[+] Get FixAddress --> 0x0012fe0c[+] Alllocated userspace PATHRECORD () 0012FE14[+] ->next @ 0012FE08[+] ->prev @ 0012FDFC[+] ->flags @ 1244656[+] Creating complex bezier path with 12fde4[+] start CreateRoundRectRgn[+] Watchdog thread 12124088 waiting on Mutex[+] Allocated 1244692 HRGN objects[+] Flattening curves...[+] Exploit ok run command

好像看着是成功了，但是NET USER ，没有添加成功。

回复
ODAY测试结果

2013/06/30 17:28

the win32k.sys EPATHOBJ 0day exploit********************************************************************** exploit by: ****** 0day finder: ****** tested system:xp/2003/win7/2008 (*32bit*) **********************************************************************[+] Get FixAddress --> 0x0012fe0c[+] Alllocated userspace PATHRECORD () 0012FE14[+] ->next @ 0012FE08[+] ->prev @ 0012FDFC[+] ->flags @ 1244656[+] Creating complex bezier path with 12fde4[+] start CreateRoundRectRgn[+] Watchdog thread 12124088 waiting on Mutex[+] Allocated 1244692 HRGN objects[+] Flattening curves...[+] Exploit ok run command

好像看着是成功了，但是NET USER ，没有添加成功。

回复
ODAY测试结果

2013/06/30 17:26

本机XP，测试无果，[+] No luck, cleaning up. and try again..
[+] start CreateRoundRectRgn
[+] Watchdog thread 17891252 waiting on Mutex
[+] Allocated 1244692 HRGN objects
[+] Flattening curves...
[+] Exploit ok run command
[!] Mutex object did not timeout, list not patched

webshell服务器测试,无响应，超时。。

回复