## https://sploitus.com/exploit?id=863C4E36-E586-5C42-B863-5C71CE40D261
This is a PoC (Proof of Concept) exploit for CVE-2020-1034, a vulnerability discovered by Microsoft and fixed on August 9, 2020. The exploit targets an unpatched Windows 10 2004, build 19041.488. The exploit code is written in C++ and uses the Windows API to manipulate the system's Event Tracing for Windows (ETW) functionality.
The exploit registers an ETW callback function, which is then used to inject malicious code into the system. The malicious code is executed with elevated privileges, allowing the attacker to perform actions such as reading and writing files, executing processes, and modifying the system's registry.
The exploit is designed to be used in a controlled environment, such as a test lab, and should not be used in a production environment without proper authorization and testing. The exploit code is complex and requires a good understanding of Windows internals and ETW functionality.
The probable entry point for this exploit is the `Main.cpp` file, which contains the code that registers the ETW callback function and injects the malicious code into the system. The execution context for this exploit is a Windows 10 system with the ETW functionality enabled.
The expected impact of this exploit is privilege escalation, as the malicious code is