Win32k Elevation of Privilege Vulnerability

This repository contains a working local privilege escalation exploit for CVE-2016-3308, a vulnerability in the Windows kernel (win32k.sys) affecting Windows 7 SP1 x86. The exploit leverages a bug in the win32k!xxxInsertMenuItem function, which mishandles memory reallocation for menu items, leading to a heap overflow in the desktop heap. By carefully crafting menu and submenu structures and manipulating menu items, the exploit achieves an out-of-bounds write, allowing the attacker to overwrite kernel function pointers (specifically, the HalDispatchTable). The exploit then injects and executes custom shellcode in kernel mode, which can be used to elevate privileges or execute arbitrary code as SYSTEM. The codebase includes detailed technical documentation (README.md, CVE-2016-3308.md), the main exploit logic (src_x86/CVE-2016-3308.cpp), supporting structures (structs.h), and utility functions (utils.cpp). The exploit is operational and requires local access to the target system. No network endpoints are involved; all actions are performed locally via Windows API and direct memory manipulation.