- About this vulnerability: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36900.
- Writeup
- Imhex pattern for .blf extension
- Header with declaration of CLFS structures
- Denial-of-Service proof of concept
The pattern is far from ideal, but it can be useful. Link
File->Import->Pattern File
The proof of concept requres python and the pwntools module installed.
Because testing has to be done on a specific build of Windows, to prevent Microsoft from updating your OS, it must not be connected to the Internet. Therefore, all dependencies need to be installed offline. How to install python modules without internet.
To run POC, copy the folder with POC to target machine and use following command:
python launch.py DoS