Update README.md

2026-09-07 09:50:53 +00:00 · 2026-08-29 04:59:50 +02:00
parent 83a5c48990
commit 647ac44274
1 changed files with 3 additions and 0 deletions
@@ -2,8 +2,11 @@
 Kaspersky Antivirus For Endpoint ZeroDay Elevation of Privileges Vulnerability

 So the problem is now leaking outside of Microsoft, there was poll held against either finding a bug in the home or commercial version and the poll results were the commercial version.
+
 At the time of writing this, the proof of concept works in a fully patched windows 11 25H2 & Kaspersky for Endpoint v14.0.0.504
+
 The PoC is not in the best shape at all, it is basically duct tapped, I just managed to make it work and that's all. It will fail to run with error so you just have to keep rerunning it. If it succeeds, it will create a file in C:\Windows\System32\MY_SNAKE_IS_SOLID.dll will full permissions for current user.
+
 The interesting part about this is the Kaspersky completely loses it when you take control over the UI process, you can cause it to stop functioning, grant/block access to files its not supposed to, if the PoC succeeds, the entire operating system becomes a hot mess.

 Anyways, here is a useless screenshot about where I tested it and it worked (after a reboot)