About The Speaker

This talk delves into the discovery of a zero-day vulnerability within a core component of Windows that has long been overlooked. Despite belonging to a typically less exploitable vulnerability class, this flaw impacts all versions from Windows XP to Windows 10, including server editions. It enables privilege escalation (LPE) from a non-privileged user account, shedding light on the lasting impact of vulnerabilities deemed less critical.

Throughout the presentation, attendees will gain insight into the macro-category of this vulnerability, its inherent constraints, and the limitations surrounding its exploitation. Emphasizing offensive strategies and kernel-level driver exploitation, the talk will explore the intricate details of kernel structures and memory layouts utilized by the exploit. Special focus will be placed on the shellcode employed for privilege escalation.

By providing practical examples and demonstrations, the presentation highlights how seemingly non-critical vulnerabilities can have a significant impact, particularly in the right environment. Security implications and potential countermeasures to mitigate the risk will also be discussed, empowering developers and system administrators to address vulnerabilities effectively.

This talk offers a unique opportunity for security enthusiasts and professionals to understand the complexities of kernel-level vulnerabilities and exploitation techniques in legacy Windows environments, reinforcing the importance of ongoing vigilance and proactive security measures.