Working Shellcode about bluekeep_cve-2019-0708_poc_to_exploit

[ihebski]

Yes, I do, but unfortunately I have no kernel exploitation dev experience, I think this is could be a great opportunity to start learning new things (quite hard, but worth a try), thank you for your answer (I have deleted the previous comment because it is not related to the current subject)

[algo7]

The shell codes can be easily generated. However, when sending them as payloads; not all of them work.

That's the problem.

[CRYP70-au]

@algo7 trying to help you get this to work and share if successful..have you actually got it to work yourself on a VM?

[algo7]

Do you know how to read assembly?

…

________________________________ From: Ihebski <[email protected]> Sent: Tuesday, June 4, 2019 1:22:39 PM To: algo7/bluekeep_CVE-2019-0708_poc_to_exploit Cc: thealgorithm; Mention Subject: Re: [algo7/bluekeep_CVE-2019-0708_poc_to_exploit] Working Shellcode (#14) @algo7<https://github.com/algo7> How to debug the payload ? the wireshark traffic is encrypted due to SSL/TLS layer, for the same case how to attach the process to a debugger such as olydbg or immunity debugger ? — You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub<#14?email_source=notifications&email_token=ACVDKVWO6JKRQF3RDTD2DIDPYZF77A5CNFSM4HSFUCEKYY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGODW4IBPY#issuecomment-498630847>, or mute the thread<https://github.com/notifications/unsubscribe-auth/ACVDKVU6TLQCH2242WW5LMTPYZF77ANCNFSM4HSFUCEA>.

[algo7]

@algo7 trying to help you get this to work and share if successful..have you actually got it to work yourself on a VM?

Not yet. At least not to the extent of poping a shell.