Some help with shell about bluekeep_cve-2019-0708_poc_to_exploit

[Ziloz]

Yes find the correct spot in the heap memory pool,It's not insanely difficult,if you've exploited buffer overflows then just do the same thing here(sort of) Run a debugger on the RDP machine to watch the mem pool. Setting the value of ECX to a actual memory address instead of "AAAAAAAAAAA" will allow you to control the space of EAX. << where the shellcode needs to land. << achieved by heap spraying, The above code very well could work replacing the A's with your shellcode I'm not sure yet. I'll give this a shot later tonight an try my luck,Since the only thing holding back a real public PoC has done is create a market for a working exploit for this on the market places(they exist already if you have the $$) which is counter productive to public security. Knowledge is security - Not withholding knowledge. I'll give this my best shot,it's not hard just annoying lol.

[algo7]

Due to Inactivity