cve/2017/CVE-2017-8464.md

CVE-2017-8464

Description

Windows Shell in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows local users or remote attackers to execute arbitrary code via a crafted .LNK file, which is not properly handled during icon display in Windows Explorer or any other application that parses the icon of the shortcut. aka "LNK Remote Code Execution Vulnerability."

POC

Reference

• https://www.exploit-db.com/exploits/42382/
• https://www.exploit-db.com/exploits/42429/

Github

• https://github.com/15866095848/15866095848
• https://github.com/1o24er/RedTeam
• https://github.com/3gstudent/CVE-2017-8464-EXP
• https://github.com/ARPSyndicate/cvemon
• https://github.com/ASR511-OO7/windows-kernel-exploits
• https://github.com/Al1ex/Red-Team
• https://github.com/Al1ex/WindowsElevation
• https://github.com/Apri1y/Red-Team-links
• https://github.com/Ascotbe/Kernelhub
• https://github.com/B-coder-code/Bill
• https://github.com/Babyemlanhatonoidongnguoi/PowerShelll
• https://github.com/Babyemlanhatonoidongnguoi/powershell
• https://github.com/Cruxer8Mech/Idk
• https://github.com/DaneSpiritGOD/ShellLink
• https://github.com/Echocipher/Resource-list
• https://github.com/Elm0D/CVE-2017-8464
• https://github.com/FuzzySecurity/PowerShell-Suite
• https://github.com/Itachl/windows_kenel_exploit
• https://github.com/Jkrasher/WindowsThreatResearch_JKrasher
• https://github.com/Loveforkeeps/Lemon-Duck
• https://github.com/Micr067/Pentest_Note
• https://github.com/Micr067/windows-kernel-exploits
• https://github.com/Neo01010/windows-kernel-exploits
• https://github.com/NetW0rK1le3r/awesome-hacking-lists
• https://github.com/Ondrik8/RED-Team
• https://github.com/Ostorlab/KEV
• https://github.com/Ostorlab/known_exploited_vulnerbilities_detectors
• https://github.com/QChiLan/win-exploit
• https://github.com/R0B1NL1N/Windows-Kernel-Exploits
• https://github.com/SecWiki/windows-kernel-exploits
• https://github.com/Securitykid/CVE-2017-8464-exp-generator
• https://github.com/Shadowshusky/windows-kernel-exploits
• https://github.com/Singlea-lyh/windows-kernel-exploits
• https://github.com/SomUrim/windows-kernel-exploits-clone
• https://github.com/TieuLong21Prosper/Detect-CVE-2017-8464
• https://github.com/TrG-1999/DetectPacket-CVE-2017-8464
• https://github.com/X-Vector/usbhijacking
• https://github.com/Ygodsec/-
• https://github.com/ZTK-009/windows-kernel-exploits
• https://github.com/admarnelson/my_powersehell_resources
• https://github.com/albinjoshy03/windows-kernel-exploits
• https://github.com/alian87/windows-kernel-exploits
• https://github.com/asr511/windows-kernel-exploits
• https://github.com/autodotua/LnkRepair
• https://github.com/copperfieldd/windows-kernel-exploits
• https://github.com/czq945659538/-study
• https://github.com/demilson/Windows
• https://github.com/distance-vector/window-kernel-exp
• https://github.com/dk47os3r/hongduiziliao
• https://github.com/doudouhala/CVE-2017-8464-exp-generator
• https://github.com/fei9747/WindowsElevation
• https://github.com/fortify24x7/FuzzySecurity-PowerShell-Suite
• https://github.com/geeksniper/windows-privilege-escalation
• https://github.com/hasee2018/Safety-net-information
• https://github.com/hktalent/bug-bounty
• https://github.com/hudunkey/Red-Team-links
• https://github.com/john-80/-007
• https://github.com/klsfct/getshell
• https://github.com/landscape2024/RedTeam
• https://github.com/likescam/Red-Teaming-Toolkit_all_pentests
• https://github.com/lnick2023/nicenice
• https://github.com/lp008/Hack-readme
• https://github.com/lyshark/Windows-exploits
• https://github.com/m0mkris/windows-kernel-exploits
• https://github.com/mishmashclone/SecWiki-windows-kernel-exploits
• https://github.com/n8v79a/exploit
• https://github.com/n8v79a/win-exploit
• https://github.com/nicolas-gagnon/windows-kernel-exploits
• https://github.com/nixawk/labs
• https://github.com/njahrckstr/Windows_Kernel_Sploit_List
• https://github.com/nobiusmallyu/kehai
• https://github.com/oneplus-x/MS17-010
• https://github.com/oscpname/AD_fuzzy_PowersShell
• https://github.com/paramint/windows-kernel-exploits
• https://github.com/password520/windows-kernel-exploits
• https://github.com/qazbnm456/awesome-cve-poc
• https://github.com/qiantu88/cve
• https://github.com/readloud/Awesome-Stars
• https://github.com/redteampa1/Windows
• https://github.com/renzu0/Windows-exp
• https://github.com/reph0r/poc-exp
• https://github.com/reph0r/poc-exp-tools
• https://github.com/root26/bug
• https://github.com/safesword/WindowsExp
• https://github.com/securifybv/ShellLink
• https://github.com/shakenetwork/PowerShell-Suite
• https://github.com/slimdaddy/RedTeam
• https://github.com/sv3nbeast/Attack-Notes
• https://github.com/svbjdbk123/-
• https://github.com/tuankiethkt020/Phat-hien-CVE-2017-8464
• https://github.com/twensoo/PersistentThreat
• https://github.com/valentinoJones/Windows-Kernel-Exploits
• https://github.com/welove88888/cve
• https://github.com/xbl2022/awesome-hacking-lists
• https://github.com/xbl3/awesome-cve-poc_qazbnm456
• https://github.com/xfinest/windows-kernel-exploits
• https://github.com/xiaoZ-hc/redtool
• https://github.com/xiaoy-sec/Pentest_Note
• https://github.com/xssfile/CVE-2017-8464-EXP
• https://github.com/xssfile/windows-kernel-exploits
• https://github.com/ycdxsb/WindowsPrivilegeEscalation
• https://github.com/yifengyou/windows-kernel-exploits
• https://github.com/yige666/windows-kernel-exploits
• https://github.com/yisan1/hh
• https://github.com/yiyebuhuijia/PowerShell-Suite
• https://github.com/yiyebuhuijia/windows-kernel-exploits
• https://github.com/yut0u/RedTeam-BlackBox
• https://github.com/zhang040723/web
• https://github.com/zyjsuper/windows-kernel-exploits