admin/MSNightmare-FalconFlank
1
0
Fork 0
mirror of https://github.com/MSNightmare/FalconFlank synced 2026-09-03 06:05:05 +00:00
Code Issues Packages Projects Releases Wiki Activity

Update README.md

Browse Source
This commit is contained in:
INFINITE NIGHTMARE
2026-09-03 05:44:38 +02:00
committed by GitHub
parent afde5cd3c1
commit 702b57477a
1 changed files with 4 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
README.md
+4
View File
@@ -1,2 +1,6 @@
# FalconFlank
Crowdstrike Falcon 0day Privilege Escalation Vulnerability
FalconFlank is a 0day privilege escalation that abuses the office malicious macros remediation in Crowdstrike Falcon Sensor, obviously by the time I drop this Crowdstrike would already have detections for it so if you want to test you either have to add it to the exclusions or obfuscate the PoC and change the dll load technique.
As of now it works in a fully updated windows 11 25H2 / Windows Server 2025 with Crowdstrike Falcon - Phase 3 Optimal Protection + needs "Microsoft Office file malicious macro removal"
<img width="1125" height="910" alt="Screenshot 2026-09-02 195701" src="https://github.com/user-attachments/assets/41c7dbb2-f48c-447e-a9c3-12d0bbc2db92" />