[Loki]

The exploit targets Windows 10 Version 22H2 (OS Build 19045.4651) and demonstrates a technique to achieve privilege escalation from a low-integrity process to SYSTEM.

Usage

1. Load the HEVD driver on the target system.

2. Start a Low Integrity command prompt:

copy %systemroot%\system32\cmd.exe .\cmd-low-integrity.exe icacls .\cmd-low-integrity.exe /setintegritylevel low .\cmd-low-integrity.exe

Verify the integrity level:

whoami /groups | find "Mandatory Label"

This should show "Mandatory Label\Low Mandatory Level".

3. From the Low Integrity command prompt, run the compiled exploit.
4. If successful, a SYSTEM shell should spawn.

Hidden Content

You must register or login to view this content.

[jack123123]

Looks interesting

[tey83819]

Thankyou fornsharing

[1malware]

Privilege escalation! Thx for Nice exploit.