CVE-2019-0708 (BlueKeep)

This repo contains EXPs about Vulnerable Windows Driver

Windows exploits, mostly precompiled. Not being updated. Check https://github.com/SecWiki/windows-kernel-exploits instead.

Reproducing Spyboy technique, which involves terminating all EDR/XDR/AVs processes by abusing the zam64.sys driver

Leak of any user's NetNTLM hash. Fixed in KB5040434