# PoC

Published articles for PoC.

This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles.

## Раскрыта уязвимость BrokenPipe в клиенте Steam, которая позволяет повысить привилегии в Windows до SYSTEM

DevFeed: [Раскрыта уязвимость BrokenPipe в клиенте Steam, которая позволяет повысить привилегии в Windows до SYSTEM](<https://devfeed.tech/articles/brokenpipe-steam-windows-system-40888.md>)

Original publisher: [Read original article](<https://habr.com/ru/news/1082774/>)

Author: denis-19

Published: 2026-09-17T02:25:27Z

Content type: news

Language: ru

Sources: [Tagir Valeev](<https://devfeed.tech/sources/tagir-valeev.md>)

Topics: [vulnerability](<https://devfeed.tech/topics/vulnerability.md>), [Exploit](<https://devfeed.tech/topics/exploit.md>), [client](<https://devfeed.tech/topics/client.md>), [Windows](<https://devfeed.tech/topics/windows.md>), [Windows 11](<https://devfeed.tech/topics/windows-11.md>)

Tags: [2026](<https://devfeed.tech/tags/2026.md>), [brokenpipe](<https://devfeed.tech/tags/brokenpipe.md>), [poc](<https://devfeed.tech/tags/poc.md>), [steam](<https://devfeed.tech/tags/steam.md>), [vulnerability](<https://devfeed.tech/tags/vulnerability.md>), [windows](<https://devfeed.tech/tags/windows.md>)

### AI overview

A developer disclosed BrokenPipe, a critical zero-day privilege-escalation vulnerability in Steam Client Service on Windows. The published proof of concept reportedly allows a local user with code execution to run a launcher with SYSTEM privileges. The issue was reportedly disclosed to Valve in March 2026 and had not been fixed at the time described.

### Source excerpt

Разработчик Джейдип Модхвадия (aka KillaBoi) раскрыл информацию о критической уязвимости нулевого дня (BrokenPipe - Steam Client Service LPE Vulnerability) в клиенте Steam в Windows, использование которой позволяет любому обычному пользователю незаметно повысить права в системе до полных привилегий SYSTEM. Читать далее

## exploits.club Weekly(ish) Newsletter 94 - P20 VMWare Bugs, ExpDev With LLMs, Pixel 0-Click Bugs, and More

DevFeed: [exploits.club Weekly(ish) Newsletter 94 - P20 VMWare Bugs, ExpDev With LLMs, Pixel 0-Click Bugs, and More](<https://devfeed.tech/articles/exploits-club-weekly-ish-newsletter-94-p20-vmware-bugs-expdev-with-llms-pixel-0-click-bugs-and-more-32636.md>)

Original publisher: [Read original article](<https://blog.exploits.club/exploits-club-weekly-ish-newsletter-94-p20-vmware-bugs-expdev-with-llms-pixel-0-click-bugs-and-more/>)

Author: exploits.club

Published: 2026-01-30T16:00:22Z

Content type: article

Language: en

Sources: [exploits.club](<https://devfeed.tech/sources/exploits-club.md>)

Topics: [Security](<https://devfeed.tech/topics/security.md>), [Exploit](<https://devfeed.tech/topics/exploit.md>), [Large Language Model](<https://devfeed.tech/topics/llm.md>), [Artificial Intelligence](<https://devfeed.tech/topics/ai.md>), [Code](<https://devfeed.tech/topics/code.md>), [Claude](<https://devfeed.tech/topics/claude.md>), [ChatGPT](<https://devfeed.tech/topics/chatgpt.md>), [Network architectures](<https://devfeed.tech/topics/network-architectures.md>), [P2P](<https://devfeed.tech/topics/p2p.md>), [Open Source](<https://devfeed.tech/topics/open-source.md>), [Linux](<https://devfeed.tech/topics/linux.md>)

Tags: [ai](<https://devfeed.tech/tags/ai.md>), [chatgpt](<https://devfeed.tech/tags/chatgpt.md>), [code](<https://devfeed.tech/tags/code.md>), [exploit](<https://devfeed.tech/tags/exploit.md>), [linux](<https://devfeed.tech/tags/linux.md>), [llms](<https://devfeed.tech/tags/llms.md>), [network](<https://devfeed.tech/tags/network.md>), [open-source](<https://devfeed.tech/tags/open-source.md>), [peer](<https://devfeed.tech/tags/peer.md>), [poc](<https://devfeed.tech/tags/poc.md>), [rce](<https://devfeed.tech/tags/rce.md>), [remote-code-execution](<https://devfeed.tech/tags/remote-code-execution.md>), [security](<https://devfeed.tech/tags/security.md>)

### AI overview

This newsletter surveys recent security research, including experiments using Claude and ChatGPT to generate proofs of concept for QuickJS vulnerabilities, a wormable remote code execution chain in Command & Conquer, a MediaTek bootloader exploit, and VMware workstation research.

### Source excerpt

Good morning friends....been a minute. But we are SO back. Annnnnyways 👇 In Case You Missed It... RE//verse Tickets Still On Sale - If you were just at DistrictCon, escape the snow-pocalypse to Florida next month OffensiveCon CFP - 30 days to get-em submitted! Resources And Write-Ups

## Reverse-engineering tcpip.sys: mechanics of a packet of the death (CVE-2021-24086)

DevFeed: [Reverse-engineering tcpip.sys: mechanics of a packet of the death (CVE-2021-24086)](<https://devfeed.tech/articles/reverse-engineering-tcpip-sys-mechanics-of-a-packet-of-the-death-cve-2021-24086-39712.md>)

Original publisher: [Read original article](<https://doar-e.github.io/blog/2021/04/15/reverse-engineering-tcpipsys-mechanics-of-a-packet-of-the-death-cve-2021-24086/>)

Author: Axel "0vercl0k" Souchet

Published: 2021-04-15T15:00:00Z

Content type: tutorial

Language: en

Sources: [Diary of a reverse-engineer](<https://devfeed.tech/sources/diary-of-a-reverse-engineer.md>)

Topics: [Reverse Engineering](<https://devfeed.tech/topics/reverse-engineering.md>), [Vulnerabilities](<https://devfeed.tech/topics/vulnerabilities.md>), [Cybersecurity](<https://devfeed.tech/topics/cybersecurity.md>), [TCP/IP](<https://devfeed.tech/topics/tcp-ip.md>), [Windows](<https://devfeed.tech/topics/windows.md>), [Kernel](<https://devfeed.tech/topics/kernel.md>)

Tags: [cve-2021-24086](<https://devfeed.tech/tags/cve-2021-24086.md>), [fragmentation](<https://devfeed.tech/tags/fragmentation.md>), [ipv6preassembledatagram](<https://devfeed.tech/tags/ipv6preassembledatagram.md>), [kernel](<https://devfeed.tech/tags/kernel.md>), [poc](<https://devfeed.tech/tags/poc.md>), [recursive-fragmentation](<https://devfeed.tech/tags/recursive-fragmentation.md>), [reverse-engineering](<https://devfeed.tech/tags/reverse-engineering.md>), [tcp-ip](<https://devfeed.tech/tags/tcp-ip.md>), [tcpip-sys](<https://devfeed.tech/tags/tcpip-sys.md>), [vulnerabilities](<https://devfeed.tech/tags/vulnerabilities.md>), [windows](<https://devfeed.tech/tags/windows.md>)

### AI overview

This article reverse-engineers CVE-2021-24086, a remotely triggerable NULL dereference in the Windows TCP/IP kernel code. It explains the patch-diffing and reverse-engineering process, the network-buffer condition behind the flaw, and the development of a proof of concept.

### Source excerpt

Introduction Since the beginning of my journey in computer security I have always been amazed and fascinated by true remote vulnerabilities. By true remotes, I mean bugs that are triggerable remotely without any user interaction. Not even a single click. As a result I am always on the lookout for ...

## Building a Proof of Concept with Kotlin Multiplatform - Touchlab

DevFeed: [Building a Proof of Concept with Kotlin Multiplatform - Touchlab](<https://devfeed.tech/articles/building-a-proof-of-concept-with-kotlin-multiplatform-touchlab-38171.md>)

Original publisher: [Read original article](<https://touchlab.co/building-proof-of-concept-kotlin-multiplatform>)

Published: 2020-04-13T17:46:18Z

Content type: article

Language: en

Sources: [Touchlab | Enterprise Mobile Innovation & Development](<https://devfeed.tech/sources/touchlab-enterprise-mobile-innovation-development.md>)

Topics: [Kotlin Multiplatform](<https://devfeed.tech/topics/kotlin-multiplatform.md>), [multiplatform](<https://devfeed.tech/topics/multiplatform.md>), [Mobile](<https://devfeed.tech/topics/mobile.md>), [Code](<https://devfeed.tech/topics/code.md>)

Tags: [code-sharing](<https://devfeed.tech/tags/code-sharing.md>), [developers](<https://devfeed.tech/tags/developers.md>), [engineering](<https://devfeed.tech/tags/engineering.md>), [kotlin](<https://devfeed.tech/tags/kotlin.md>), [kotlin-multiplatform](<https://devfeed.tech/tags/kotlin-multiplatform.md>), [mobile](<https://devfeed.tech/tags/mobile.md>), [multiplatform](<https://devfeed.tech/tags/multiplatform.md>), [poc](<https://devfeed.tech/tags/poc.md>), [thoughts](<https://devfeed.tech/tags/thoughts.md>), [touchlabshare](<https://devfeed.tech/tags/touchlabshare.md>)

### AI overview

Russell Wolf presents Touchlab's Kotlin Multiplatform starter project, KaMP Kit, and discusses approaches for building a proof of concept for sharing mobile code.

### Source excerpt

Multiplatform engineer Russell Wolf presents our Kotlin Multiplatform starter project, KaMP Kit and discusses approaches for building a shared code POC.

## Lenovo CVE-2020-8319 and CVE-2020-8324 PoC

DevFeed: [Lenovo CVE-2020-8319 and CVE-2020-8324 PoC](<https://devfeed.tech/articles/lenovo-cve-2020-8319-and-cve-2020-8324-poc-32627.md>)

Original publisher: [Read original article](<https://ethicalchaos.dev/2020/03/26/lenovo-cve-2020-8319-and-cve-2020-8324-poc/>)

Author: CCob

Published: 2020-03-26T17:35:16Z

Content type: article

Language: en

Sources: [Ethical Chaos](<https://devfeed.tech/sources/ethical-chaos.md>)

Topics: [lenovo](<https://devfeed.tech/topics/lenovo.md>), [Vulnerabilities](<https://devfeed.tech/topics/vulnerabilities.md>), [Exploit](<https://devfeed.tech/topics/exploit.md>), [coding](<https://devfeed.tech/topics/coding.md>), [GitHub](<https://devfeed.tech/topics/github.md>)

Tags: [c-sharp](<https://devfeed.tech/tags/c-sharp.md>), [cve](<https://devfeed.tech/tags/cve.md>), [cve-2020-8319](<https://devfeed.tech/tags/cve-2020-8319.md>), [cve-2020-8324](<https://devfeed.tech/tags/cve-2020-8324.md>), [exploit](<https://devfeed.tech/tags/exploit.md>), [github](<https://devfeed.tech/tags/github.md>), [lenovo](<https://devfeed.tech/tags/lenovo.md>), [net](<https://devfeed.tech/tags/net.md>), [poc](<https://devfeed.tech/tags/poc.md>), [privesc](<https://devfeed.tech/tags/privesc.md>)

### AI overview

The article releases a C# proof of concept for Lenovo CVE-2020-8319 and CVE-2020-8324. It states that the vulnerabilities can enable privilege escalation from an unprivileged account to SYSTEM and recommends upgrading Lenovo Vantage's System Interface Foundation component to version 1.1.19.3 or higher.

### Source excerpt

C# PoC for Lenovo CVE-2020-8319 and CVE-2020-8324 The post Lenovo CVE-2020-8319 and CVE-2020-8324 PoC appeared first on Ethical Chaos.

## Pwnagotchi 1.0.0: An AI-assisted Raspberry Pi tool for WiFi security testing

DevFeed: [Pwnagotchi 1.0.0: An AI-assisted Raspberry Pi tool for WiFi security testing](<https://devfeed.tech/articles/weaponizing-and-gamifying-ai-for-wifi-hacking-presenting-pwnagotchi-1-0-0-41263.md>)

Original publisher: [Read original article](<https://www.evilsocket.net/2019/10/19/Weaponizing-and-Gamifying-AI-for-WiFi-Hacking-Presenting-Pwnagotchi-1-0-0/>)

Author: Simone Margaritelli

Published: 2019-10-19T08:45:28Z

Content type: article

Language: en

Sources: [evilsocket](<https://devfeed.tech/sources/evilsocket.md>)

Topics: [Artificial Intelligence](<https://devfeed.tech/topics/ai.md>), [Hacking](<https://devfeed.tech/topics/hacking.md>), [Raspberry Pi](<https://devfeed.tech/topics/raspberry-pi.md>), [REST API](<https://devfeed.tech/topics/rest-api.md>)

Tags: [ai](<https://devfeed.tech/tags/ai.md>), [artificial-intelligence](<https://devfeed.tech/tags/artificial-intelligence.md>), [bettercap](<https://devfeed.tech/tags/bettercap.md>), [cuda](<https://devfeed.tech/tags/cuda.md>), [cybersecurity](<https://devfeed.tech/tags/cybersecurity.md>), [deep-learning](<https://devfeed.tech/tags/deep-learning.md>), [deep-neural-networks](<https://devfeed.tech/tags/deep-neural-networks.md>), [deep-reinforcement-learning](<https://devfeed.tech/tags/deep-reinforcement-learning.md>), [dnn](<https://devfeed.tech/tags/dnn.md>), [e-paper](<https://devfeed.tech/tags/e-paper.md>), [hacking](<https://devfeed.tech/tags/hacking.md>), [handshake-capture](<https://devfeed.tech/tags/handshake-capture.md>), [handshakes](<https://devfeed.tech/tags/handshakes.md>), [low-power](<https://devfeed.tech/tags/low-power.md>), [machine-learning](<https://devfeed.tech/tags/machine-learning.md>), [monitor-mode](<https://devfeed.tech/tags/monitor-mode.md>), [neural-networks](<https://devfeed.tech/tags/neural-networks.md>), [nvidia](<https://devfeed.tech/tags/nvidia.md>), [pi](<https://devfeed.tech/tags/pi.md>), [poc](<https://devfeed.tech/tags/poc.md>), [portable-hacking](<https://devfeed.tech/tags/portable-hacking.md>), [pwnagotchi](<https://devfeed.tech/tags/pwnagotchi.md>), [raspberry-pi](<https://devfeed.tech/tags/raspberry-pi.md>), [reinforcement-learning](<https://devfeed.tech/tags/reinforcement-learning.md>), [release](<https://devfeed.tech/tags/release.md>), [wifi](<https://devfeed.tech/tags/wifi.md>), [wifi-hacking](<https://devfeed.tech/tags/wifi-hacking.md>), [wireless-security](<https://devfeed.tech/tags/wireless-security.md>)

### AI overview

The article recounts the development and release of Pwnagotchi 1.0.0, a Raspberry Pi-based project that uses bettercap's REST API and adaptive algorithms to improve WiFi handshake collection and related security-testing capabilities. It describes the project's evolution from an initial Python proof of concept and discusses the use of a Waveshare e-Paper display for portable, low-power operation.

### Source excerpt

This is the story of a summer project that started out of boredom and that evolved into something incredibly fun and unique. It is also the story of how that project went from being discussed on a porch by just two people, to having a community made of almost 700 awesome people (and counting!) that gathered, polished it and made today's release possible. TL;DR: You can download the 1.0.0 .img file from here, then just follow the instructions. If you want the long version instead, sit back, relax and enjoy the ride. Let me tell you: it's going to be quite a long journey compared to my usual blog posts, but it'll be worth it (i hope) and fun (i hope even harder). Let's begin ...

## First dip into the kernel pool : MS10-058

DevFeed: [First dip into the kernel pool : MS10-058](<https://devfeed.tech/articles/first-dip-into-the-kernel-pool-ms10-058-39693.md>)

Original publisher: [Read original article](<https://doar-e.github.io/blog/2014/03/11/first-dip-into-the-kernel-pool-ms10-058/>)

Author: Jeremy "\_\_x86" Fetiveau

Published: 2014-03-11T09:52:37Z

Content type: tutorial

Language: en

Sources: [Diary of a reverse-engineer](<https://devfeed.tech/sources/diary-of-a-reverse-engineer.md>)

Topics: [Vulnerabilities](<https://devfeed.tech/topics/vulnerabilities.md>), [Exploit](<https://devfeed.tech/topics/exploit.md>), [Windows](<https://devfeed.tech/topics/windows.md>), [Kernel](<https://devfeed.tech/topics/kernel.md>), [Code](<https://devfeed.tech/topics/code.md>)

Tags: [exploit](<https://devfeed.tech/tags/exploit.md>), [exploitation](<https://devfeed.tech/tags/exploitation.md>), [integer-overflow](<https://devfeed.tech/tags/integer-overflow.md>), [kernel](<https://devfeed.tech/tags/kernel.md>), [kernel-pool](<https://devfeed.tech/tags/kernel-pool.md>), [memory-corruption](<https://devfeed.tech/tags/memory-corruption.md>), [ms10-058](<https://devfeed.tech/tags/ms10-058.md>), [poc](<https://devfeed.tech/tags/poc.md>), [reverse-engineering](<https://devfeed.tech/tags/reverse-engineering.md>), [tcpip-sys](<https://devfeed.tech/tags/tcpip-sys.md>), [windows](<https://devfeed.tech/tags/windows.md>)

### AI overview

This tutorial explores a proof-of-concept exploit for the MS10-058 vulnerability in Windows 7 kernel pool memory management. It explains how an integer overflow in tcpip.sys causes an undersized non-paged pool allocation and subsequent pool overflow, based on the author's testing in a Windows 7 32-bit virtual machine.

### Source excerpt

Introduction I am currently playing with pool-based memory corruption vulnerabilities. That's why I wanted to program a PoC exploit for the vulnerability presented by Tarjei Mandt during his first talk "Kernel Pool Exploitation on Windows 7" [3]. I think it's a good exercise to start learning about pool overflows ...