skills.rest
blacklanternsecurity
blacklanternsecurityOFFICIAL
Explore all skills by this author →
WebsiteGitHub

windows-kernel-exploits

Exploit Windows kernel vulnerabilities and vulnerable drivers for SYSTEM privilege escalation.

253|37|Updated Feb 22, 2026
Search Tags:#privilege escalation#windows#kernel exploit#BYOVD#vulnerable driver#SYSTEM
One-click install
npx skills add https://github.com/blacklanternsecurity/red-run --skill windows-kernel-exploits
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: windows-kernel-exploits
Source: https://github.com/blacklanternsecurity/red-run/tree/main/skills/privesc/windows-kernel-exploits
Command: npx skills add https://github.com/blacklanternsecurity/red-run --skill windows-kernel-exploits

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill helps penetration testers escalate privileges on Windows systems by exploiting kernel vulnerabilities, vulnerable drivers, and privileged file operations to achieve SYSTEM-level access.

Core Features & Use Cases

  • Vulnerability Identification: Leverages tools like WES-NG and Watson to identify exploitable kernel CVEs based on system information.
  • Exploitation: Provides detailed steps and commands for exploiting various Windows kernel vulnerabilities (e.g., PrintNightmare, EternalBlue) and techniques like BYOVD (Bring Your Own Vulnerable Driver) and privileged file writes.
  • Use Case: After gaining initial access to a Windows machine, use this Skill to identify and exploit a kernel vulnerability to elevate your privileges to SYSTEM, allowing full control over the machine.

Quick Start

Use the windows-kernel-exploits skill to run systeminfo and identify potential kernel exploits.

Frequently Asked Questions about windows-kernel-exploits

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I escalate privileges to SYSTEM on Windows using kernel exploits?▼

Windows privilege escalation to SYSTEM is achieved by exploiting kernel vulnerabilities, vulnerable drivers, or privileged file operations after gaining initial access to a target machine.

What is BYOVD and how does it help gain SYSTEM privileges on Windows?▼

BYOVD (Bring Your Own Vulnerable Driver) is a local privilege escalation technique where you load a known vulnerable driver onto a Windows system to exploit kernel memory and achieve SYSTEM access.

How can I identify exploitable Windows kernel CVEs for privilege escalation?▼

You can identify exploitable Windows kernel CVEs by running systeminfo and parsing the output with exploit suggesters like WES-NG or Watson to find matching vulnerabilities.

Can I use this Skill to exploit PrintNightmare or EternalBlue for local privilege escalation?▼

Yes, this Skill provides detailed steps and commands for executing exploits for CVEs like PrintNightmare and EternalBlue to elevate your privileges to SYSTEM on Windows.

Do I need initial access to a Windows machine before using kernel exploits for privilege escalation?▼

Yes, you need initial access to the target Windows machine before using this Skill to identify and exploit kernel vulnerabilities to elevate your privileges to SYSTEM.

What are the limitations of using Windows kernel exploits for privilege escalation?▼

Kernel exploitation for SYSTEM access requires matching CVEs to the specific Windows version and patch level, meaning fully patched systems may lack known vulnerabilities to exploit.

Related Skills

Explore More Software Engineering Skills→
AeonDaveAeonDave
15

enum4linux

Enumerate Windows and Samba hosts for users, shares, groups, and policies.

Community
Intermediate
jcastillotxjcastillotx

Linux Privilege Escalation

Enumerate Linux systems for privilege escalation paths to root.

Community
Advanced
AeonDaveAeonDave
15

privesccheck

Enumerate Windows privilege escalation vectors via PowerShell without administrative privileges.

Community
Intermediate
blacklanternsecurityblacklanternsecurity
253

windows-service-dll-abuse

Exploit Windows service misconfigurations and DLL hijacking for privilege escalation.

Official
Advanced