Proof of concept for a bug, that allows any user to crash the Windows Event Log service of any other Windows 10/Windows Server 2022 machine on the same domain. The crash occurs in wevtsvc!VerifyUnicodeString
when an attacker sends a malformed UNICODE_STRING
object to the ElfrRegisterEventSourceW
method exposed by the RPC-based EventLog Remoting Protocol.
-
Notifications
You must be signed in to change notification settings - Fork 34
floesen/EventLogCrasher
Folders and files
Name | Name | Last commit message | Last commit date | |
---|---|---|---|---|
Repository files navigation
About
No description, website, or topics provided.
Resources
Stars
Watchers
Forks
Releases
No releases published
Packages 0
No packages published