Jun 12
CVE-2021-1732 is a Win32k local privilege escalation in win32kfull.sys. By flipping the 0x800 bit on tagWND with NtUserConsoleControl and returning a fake value from a user-mode callback inside xxxClientAllocWindowClassExtraBytes, an attacker turns the cbWndExtra length into a controllable kernel write offset and walks the token to NT AUTHORITY SYSTEM. End-to-end Metasploit PoC against Windows 10 20H2.
core-jmp.org/2026/06/cve-202…
#BITTERAPT #CVE20211732 #ElevationOfPrivilege #KernelExploit #LPE #Metasploit #Meterpreter #MSFVenom #NTAUTHORITYSYSTEM #NtUserConsoleControl #OutofBoundsWrite #ReflectiveDLLInjection #Win32k #win32kfullsys #Windows10 #WindowsKernelExploitation #WindowsKernelVulnerability #WindowsLPE #WndExtra
2
162
3 Jan 2025
0x00 - Introduction to Windows Kernel Exploitation # WindowsKernelExploitation #WinDbg #HEVD #ExploitDevelopment #TokenStealing wetw0rk.github.io/posts/0x00…
30
127
8,184
27 Feb 2020
So, @HackSysTeam is going to be in Poland again. And his training gives a really solid & friendly introduction to #WindowsKernelExploitation - check it out!
20 Feb 2020
Did you know? You can still buy Early Bird ticket for #x33fcon training - until the EoM. Check the list: x33fcon.com/#!training.md
Thank you trainers: @SecurityTube @monnappa22 @Sektor7Net @abhinavbom @prateekg147 @din3zh @HackSysTeam @abhaybhargav @bondijois @lior_yaari
3
10
30
26 Feb 2019
Had a great session on #WindowsKernelExploitation by @HackSysTeam .. Looking forward for more @nullcon. Thank you @Microsoft and @Winja_CTF for the scholarship.
7
29
11 Sep 2018
Day 2: Fuzzing and exploit mitigation bypasses. #WindowsKernelExploitation cc:@44CON
4
7
19 Jan 2018
Hey Ladies, @WomeninSecurity @WomenInCyber you can earn a free seat for the #windowsKernelExploitation class @nullcon
Kudos @HackSysTeam
#WITBrag
18 Jan 2018
. @nullcon is approaching. Check this out if you are a women in security and kernel excites you.
21
24
27 Jul 2015
Just submitted HackSys Extreme Vulnerable Driver @BlackHatEvents #BlackHatArsenal #WindowsKernelExploitation
github.com/hacksysteam/HackS…
2