windows-kernel-exploits

Exploit Windows kernel vulnerabilities and vulnerable drivers for SYSTEM privilege escalation.

253|37|Updated Feb 22, 2026

Search Tags:#privilege escalation #windows #kernel exploit #BYOVD #vulnerable driver #SYSTEM

Ready to run

npx skills add https://github.com/blacklanternsecurity/red-run --skill windows-kernel-exploits

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: windows-kernel-exploits
Source: https://github.com/blacklanternsecurity/red-run/tree/main/skills/privesc/windows-kernel-exploits
Command: npx skills add https://github.com/blacklanternsecurity/red-run --skill windows-kernel-exploits

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill helps penetration testers escalate privileges on Windows systems by exploiting kernel vulnerabilities, vulnerable drivers, and privileged file operations to achieve SYSTEM-level access.

Core Features & Use Cases

Vulnerability Identification: Leverages tools like WES-NG and Watson to identify exploitable kernel CVEs based on system information.
Exploitation: Provides detailed steps and commands for exploiting various Windows kernel vulnerabilities (e.g., PrintNightmare, EternalBlue) and techniques like BYOVD (Bring Your Own Vulnerable Driver) and privileged file writes.
Use Case: After gaining initial access to a Windows machine, use this Skill to identify and exploit a kernel vulnerability to elevate your privileges to SYSTEM, allowing full control over the machine.

Quick Start

Use the windows-kernel-exploits skill to run systeminfo and identify potential kernel exploits.

Frequently Asked Questions about windows-kernel-exploits

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I escalate privileges to SYSTEM on Windows using kernel exploits?▼

Windows privilege escalation to SYSTEM is achieved by exploiting kernel vulnerabilities, vulnerable drivers, or privileged file operations after gaining initial access to a target machine.

What is BYOVD and how does it help gain SYSTEM privileges on Windows?▼

BYOVD (Bring Your Own Vulnerable Driver) is a local privilege escalation technique where you load a known vulnerable driver onto a Windows system to exploit kernel memory and achieve SYSTEM access.

How can I identify exploitable Windows kernel CVEs for privilege escalation?▼

You can identify exploitable Windows kernel CVEs by running systeminfo and parsing the output with exploit suggesters like WES-NG or Watson to find matching vulnerabilities.

Can I use this Skill to exploit PrintNightmare or EternalBlue for local privilege escalation?▼

Yes, this Skill provides detailed steps and commands for executing exploits for CVEs like PrintNightmare and EternalBlue to elevate your privileges to SYSTEM on Windows.

Do I need initial access to a Windows machine before using kernel exploits for privilege escalation?▼

Yes, you need initial access to the target Windows machine before using this Skill to identify and exploit kernel vulnerabilities to elevate your privileges to SYSTEM.

What are the limitations of using Windows kernel exploits for privilege escalation?▼

Kernel exploitation for SYSTEM access requires matching CVEs to the specific Windows version and patch level, meaning fully patched systems may lack known vulnerabilities to exploit.