Win-LocalPriv-Escalation-polarbear

Win-LocalPriv-Escalation-polarbear copied to clipboard

Windows Local Privilege Escalation using Task Scheduler (schtasks.exe) - 0 Day Exploit

Thanks to @SandboxEscaper for releasing the exploit code (.cpp) in github

Source: https://github.com/SandboxEscaper/polarbearrepo
Tested on: Windows 10 x64
Environment: VirtualBox

Note: I have modified the source code with little change for easy understanding with comandline arguments.

Demo

:octocat:Credits:

• Umar Farook: OSCE | Technology Security Analyst | DevSecops | Researcher
• FOS Team : Fools of Security

Support !

Email address: [email protected] or [email protected]
Youtube: Fools Of Security
Website: Fools Of Security Community

Reference

• polarbearrepo
• ZwSetInformationFile
• FileLinkInformation