项目说明
windows-kernel-exploits
简介
windows-kernel-exploits
***
#### 漏洞列表
##### #Security Bulletin #KB #Description #Operating System
C [Microsoft DWM Core Library Ele of Pri ] (Windows 10, 20)C [Windows Win32k Ele of Pri ] (Windows 10, 2019/20H2)C [Windows Background Intelligent Transfer Service Ele of Pri ] (Windows 7/8/10, 2008/2012/2016/2019)C [A remote 代码 execution exists in the way that the Microsoft Ser Block 3.1.1 (SMBv3) 协议 handles certain requests, aka 'Windows SMBv3 客户端/Ser 代码 Execution '] (Windows 1903/1909)C [An ele of pri exists in Windows when the Win32k component fails to properly handle objects in memory] (Windows 7/8/10/2008/2012/2016)C [An ele of pri exists in Windows when the Win32k component fails to properly handle objects in memory] (Windows 7/8/10/2008/2012/2016/2019)C [An ele of pri exists in Windows when the Win32k component fails to properly handle objects in memory] (Windows 7/8/10/2008/2012/2016)C [Windows Kernel Ele of Pri ] (Windows 7 SP1/Windows 服务端 2008 R2 SP1)C [Windows Subsystem for Linux Ele of Pri ] (Windows 10 1703/Windows 10 1709/Windows Ser 1709)C [An ele of pri in Windows Win32k component] (>= windows 8.1)C [Windows ALPC Ele of Pri ] (windows 7/8.1/10/2008/2012/2016)MS17-017 [KB4013081] [GDI Palette Objects Local Pri Escalation] (windows 7/8)C [LNK Remote 代码 Execution ] (windows 10/8.1/7/2016/2010/2008)C [Windows COM Ele of Pri ] (windows 10/8.1/7/2016/2010/2008)C [SMBv3 Null Pointer Dereference Denial of Service] (Windows 8.1/服务端 2012 R2)C [Win32k Ele of Pri ] (Windows 7 SP1/2008 SP2,2008 R2 SP1)MS17-010 [KB4013389] [Windows Kernel Mode Drivers] (windows 7/2008/2003/XP)MS16-135 [KB3199135] [Windows Kernel Mode Drivers] (2016)MS16-111 [KB3186973] [kernel api] (Windows 10 10586 (32/64)/8.1)MS16-098 [KB3178466] [Kernel Driver] (Win 8.1)MS16-075 [KB3164038] [Hot Potato] (2003/2008/7/8/2012)MS16-034 [KB3143145] [Kernel Driver] (2008/7/8/10/2012)MS16-032 [KB3143141] [Secondary Logon Handle] (2008/7/8/10/2012)MS16-016 [KB3136041] [WebDAV] (2008/Vista/7)MS16-014 [K3134228] [remote 代码 execution] (2008/Vista/7)MS15-097 [KB3089656] [remote 代码 execution] (win8.1/2012)MS15-076 [KB3067505] [RPC] (2003/2008/7/8/2012)MS15-077 [KB3077657] [ATM] (XP/Vista/Win7/Win8/2000/2003/2008/2012)MS15-061 [KB3057839] [Kernel Driver] (2003/2008/7/8/2012)MS15-051 [KB3057191] [Windows Kernel Mode Drivers] (2003/2008/7/8/2012)MS15-015 [KB3031432] [Kernel Driver] (Win7/8/8.1/2012/RT/2012 R2/2008 R2)MS15-010 [KB3036220] [Kernel Driver] (2003/2008/7/8)MS15-001 [KB3023266] [Kernel Driver] (2008/2012/7/8)MS14-070 [KB2989935] [Kernel Driver] (2003)MS14-068 [KB3011780] [Domain Pri Escalation] (2003/2008/2012/7/8)MS14-058 [KB3000061] [Win32k.sys] (2003/2008/2012/7/8)MS14-066 [KB2992611] [Windows Schannel Allowing remote 代码 execution] (/7 SP1/8/Windows 8.1/2003 SP2/2008 SP2/2008 R2 SP1/2012/2012 R2/Windows RT/Windows RT 8.1)MS14-040 [KB2975684] [AFD Driver] (2003/2008/2012/7/8)MS14-002 [KB2914368] [NDProxy] (2003/XP) MS13-053 [KB2850851] [win32k.sys] (XP/Vista/2003/2008/win 7) MS13-046 [KB2840221] [dxgkrnl.sys] (Vista/2003/2008/2012/7) MS13-005 [KB2778930] [Kernel Mode Driver] (2003/2008/2012/win7/8) MS12-042 [KB2972621] [Service Bus] (2008/2012/win7)MS12-020 [KB2671387] [RDP] (2003/2008/7/XP)MS11-080 [KB2592799] [AFD.sys] (2003/XP)MS11-062 [KB2566454] [NDISTAPI] (2003/XP)MS11-046 [KB2503665] [AFD.sys] (2003/2008/7/XP)MS11-011 [KB2393802] [kernel Driver] (2003/2008/7/XP/Vista)MS10-092 [KB2305420] [Task Scheduler] (2008/7) MS10-065 [KB2267960] [FastCGI] (IIS 5.1, 6.0, 7.0, and 7.5) MS10-059 [KB982799] [ACL-Churraskito] (2008/7/Vista) MS10-048 [KB2160329] [win32k.sys] (XP SP2 & SP3/2003 SP2/Vista SP1 & SP2/2008 Gold & SP2 & R2/Win7) MS10-015 [KB977165] [KiTrap0D] (2003/2008/7/XP) MS10-012 [KB971468] [SMB 客户端 Trans2 stack o] (Windows 7/2008R2) MS09-050 [KB975517] [Remote 代码 Execution] (2008/Vista) MS09-020 [KB970483] [IIS 6.0] (IIS 5.1 and 6.0) MS09-012 [KB959454] [Chimichurri] (Vista/win7/2008/Vista) MS08-068 [KB957097] [Remote 代码 Execution] (2000/XP) MS08-067 [KB958644] [Remote 代码 Execution] (Windows 2000/XP/服务端 2003/Vista/服务端 2008) MS08-066 [KB956803] [AFD.sys] (Windows 2000/XP/服务端 2003) MS08-025 [KB941693] [Win32.sys] (XP/2003/2008/Vista) MS06-040 [KB921883] [Remote 代码 Execution] (2003/xp/2000) MS05-039 [KB899588] [PnP Service] (Win 9X/ME/NT/2000/XP/2003) MS03-026 [KB823980] [Buffer O In RPC Interface] (/NT/2000/XP/2003) 工具
缺失补丁检测 项目维护
+ ourren(sina weibo <a href=")
+ hx(sina weibo <a href=")
+ Bearcat(github <a href=")
+ CaledoniaProject(github <a href=")
免责说明
请勿用于非法的用途，否则造成的严重后果与本项目无关。
参考链接
Windows Kernel ExploitsWindows-Exploit-Suggester WindowsExploitsPri Windows Pri Escalation Fundamentals brianwrf/WinSystemHelper Windows Exploits 转载
转载请注明来自
补充完善
欢迎大家补充完善
©<a href=" target="_blank">SecWiki</a> 2017
项目信息
开发语言：C
Star 数：8749
技术要点
该项目属于黑客技术方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕windows-kernel-exploits Windows平台提权漏洞集合展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。
从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。
使用与学习建议
1. 下载源码压缩包，解压到本地环境。
2. 根据项目类型准备对应的运行环境与依赖。
3. 按照 README 中的步骤完成配置与部署。
4. 在隔离的测试环境中运行验证，避免影响生产系统。
免责声明
本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。