Frost

[starlabs @starlabs_sg]

STAR Labs Windows Exploitation Challenge Writeup
We're happy to announce that @Fr0st1706 solved our recent Windows exploitation challenge & earned a ticket to @offbyoneconf ! 🎉
Full writeup here: https://t.co/Sv1Tfvrcv0
Thank you to everyone who participated!

[Frost @Fr0st1706]

Thank you @starlabs_sg for the awesome challenge!

[starlabs @starlabs_sg]

Finally, @Fr0st1706 has pwned the target! He’s the 1st to drop the exploit with a writeup! 💥
Huge Congratulations to him 🥳
But wait, our boss is putting up 2 MORE @offbyoneconf tickets for grabs if two others drop their exploit by 15th March 2025! 🔥
We will release the then

[Frost @Fr0st1706]

@scwuaptx Thank you!
The bug was really clever too. I hope that you could share how you found it. 😀

[Frost @Fr0st1706]

My exploit code for CVE-2024-38054, a pretty interesting pool overflow bug in the ksthunk.sys driver: https://t.co/cvZYPSJpPT

[Frost @Fr0st1706]

@gh057mz You can download the vulnerable driver on winbindex

[Frost @Fr0st1706]

Spent the weekend learning about pool allocation in the Windows kernel. Here are some of my notes on the topic. Hope that it is useful to someone

https://t.co/nr5LjpGnfe

[Frost @Fr0st1706]

My writeup for Conquest of Camelot challenge from @ProjectSEKAIctf

https://t.co/fZjBNEKeeQ