Sploitus

Exploit for Win32k ConsoleControl Offset Confusion

metasploit · 2021-03-19

Exploit Code

ruby16 lines
## https://sploitus.com/exploit?id=MSF:EXPLOIT-WINDOWS-LOCAL-CVE_2021_1732_WIN32K-
A vulnerability exists within win32k that can be leveraged by an attacker to escalate privileges to those of
            NT AUTHORITY\SYSTEM. The flaw exists in how the WndExtra field of a window can be manipulated into being
            treated as an offset despite being populated by an attacker-controlled value. This can be leveraged to
            achieve an out of bounds write operation, eventually leading to privilege escalation.
### Module Options

```
    msf > use exploit/windows/local/cve_2021_1732_win32k
    msf exploit(cve_2021_1732_win32k) > show targets
        ...targets...
    msf exploit(cve_2021_1732_win32k) > set TARGET < target-id >
    msf exploit(cve_2021_1732_win32k) > show options
        ...show and set options...
    msf exploit(cve_2021_1732_win32k) > exploit
```