<\/p>\n#pragma comment(lib, “ntdll.lib”)<\/p>\n
#define HIDWORD(l) ((DWORD)(((DWORDLONG)(l)>>32)&0xFFFFFFFF))
\n
#define LODWORD(l) ((DWORD)((DWORDLONG)(l)))<\/p>\n
#define AfdOpenPacket “AfdOpenPacketXX”
\n
#define AFD_DEVICE_NAME L”\\\\Device\\\\Afd”
\n
#define LOCALHOST “127.0.0.1”<\/p>\n
#define IOCTL_AFD_BIND 0x12003LL
\n
#define IOCTL_AFD_LISTEN 0x1200BLL
\n
#define IOCTL_AFD_CONNECT 0x120BBLL
\n
#define IOCTL_AFD_GET_SOCK_NAME 0x1202FLL
\n
#define FSCTL_PIPE_PEEK 0x11400CLL
\n
#define FSCTL_PIPE_IMPERSONATE 0x11001CLL
\n
#define FSCTL_PIPE_INTERNAL_WRITE 0x119FF8<\/p>\n
#define OBJ_CASE_INSENSITIVE 0x00000040
\n
#define OBJ_INHERIT 0x00000002
\n
#define FILE_OPEN_IF 0x3
\n
#define NT_SUCCESS(Status) (((NTSTATUS)(Status)) >= 0)<\/p>\n
#define OFFSET_IN_TOKEN_VARIABLEPART 0x490
\n
#define OFFSET_IN_TOKEN_TOKEN_PRIVILEGES 0x40
\n
#define OFFSET_IN_TOKEN_PRIMARY_GROUP 0xA8
\n
#define OFFSET_IN_TOKEN_DYNAMIC_PART 0xB0
\n
#define OFFSET_IN_TOKEN_DEFAULT_DACL 0xB8
\n
#define PREVIOUS_MODE_OFFSET 0x232
\n
#define OFFSET_TO_ACTIVE_PROCESS_LINKS 0x448
\n
#define OFFSET_TO_TOKEN 0x4b8
\n
#define CURRENT_THREAD (HANDLE)0xFFFFFFFFFFFFFFFE<\/p>\n
typedef struct IO_STATUS_BLOCK
\n
{
\n
union
\n
{
\n
DWORD Status;
\n
PVOID Pointer;
\n
};<\/p>\n
DWORD* Information;
\n
};<\/p>\n
\/\/0x4 bytes (sizeof)
\n
struct _SYSTEM_POWER_STATE_CONTEXT
\n
{
\n
union
\n
{
\n
struct
\n
{
\n
ULONG Reserved1 : 8; \/\/0x0
\n
ULONG TargetSystemState : 4; \/\/0x0
\n
ULONG EffectiveSystemState : 4; \/\/0x0
\n
ULONG CurrentSystemState : 4; \/\/0x0
\n
ULONG IgnoreHibernationPath : 1; \/\/0x0
\n
ULONG PseudoTransition : 1; \/\/0x0
\n
ULONG KernelSoftReboot : 1; \/\/0x0
\n
ULONG DirectedDripsTransition : 1; \/\/0x0
\n
ULONG Reserved2 : 8; \/\/0x0
\n
};
\n
ULONG ContextAsUlong; \/\/0x0
\n
};
\n
};<\/p>\n
\/\/0x4 bytes (sizeof)
\n
union _POWER_STATE
\n
{
\n
enum _SYSTEM_POWER_STATE SystemState; \/\/0x0
\n
enum _DEVICE_POWER_STATE DeviceState; \/\/0x0
\n
};<\/p>\n
\/\/0x48 bytes (sizeof)
\n
typedef struct _IO_STACK_LOCATION
\n
{
\n
UCHAR MajorFunction; \/\/0x0
\n
UCHAR MinorFunction; \/\/0x1
\n
UCHAR Flags; \/\/0x2
\n
UCHAR Control; \/\/0x3
\n
union
\n
{
\n
struct
\n
{
\n
struct _IO_SECURITY_CONTEXT* SecurityContext; \/\/0x8
\n
ULONG Options; \/\/0x10
\n
USHORT FileAttributes; \/\/0x18
\n
USHORT ShareAccess; \/\/0x1a
\n
ULONG EaLength; \/\/0x20
\n
} Create; \/\/0x8
\n
struct
\n
{
\n
struct _IO_SECURITY_CONTEXT* SecurityContext; \/\/0x8
\n
ULONG Options; \/\/0x10
\n
USHORT Reserved; \/\/0x18
\n
USHORT ShareAccess; \/\/0x1a
\n
struct _NAMED_PIPE_CREATE_PARAMETERS* Parameters; \/\/0x20
\n
} CreatePipe; \/\/0x8
\n
struct
\n
{
\n
struct _IO_SECURITY_CONTEXT* SecurityContext; \/\/0x8
\n
ULONG Options; \/\/0x10
\n
USHORT Reserved; \/\/0x18
\n
USHORT ShareAccess; \/\/0x1a
\n
struct _MAILSLOT_CREATE_PARAMETERS* Parameters; \/\/0x20
\n
} CreateMailslot; \/\/0x8
\n
struct
\n
{
\n
ULONG Length; \/\/0x8
\n
ULONG Key; \/\/0x10
\n
ULONG Flags; \/\/0x14
\n
union _LARGE_INTEGER ByteOffset; \/\/0x18
\n
} Read; \/\/0x8
\n
struct
\n
{
\n
ULONG Length; \/\/0x8
\n
ULONG Key; \/\/0x10
\n
ULONG Flags; \/\/0x14
\n
union _LARGE_INTEGER ByteOffset; \/\/0x18
\n
} Write; \/\/0x8
\n
struct
\n
{
\n
ULONG Length; \/\/0x8
\n
struct _UNICODE_STRING* FileName; \/\/0x10
\n
enum _FILE_INFORMATION_CLASS FileInformationClass; \/\/0x18
\n
ULONG FileIndex; \/\/0x20
\n
} QueryDirectory; \/\/0x8
\n
struct
\n
{
\n
ULONG Length; \/\/0x8
\n
ULONG CompletionFilter; \/\/0x10
\n
} NotifyDirectory; \/\/0x8
\n
struct
\n
{
\n
ULONG Length; \/\/0x8
\n
ULONG CompletionFilter; \/\/0x10
\n
enum _DIRECTORY_NOTIFY_INFORMATION_CLASS
\n
DirectoryNotifyInformationClass; \/\/0x18
\n
} NotifyDirectoryEx; \/\/0x8
\n
struct
\n
{
\n
ULONG Length; \/\/0x8
\n
enum _FILE_INFORMATION_CLASS FileInformationClass; \/\/0x10
\n
} QueryFile; \/\/0x8
\n
struct
\n
{
\n
ULONG Length; \/\/0x8
\n
enum _FILE_INFORMATION_CLASS FileInformationClass; \/\/0x10
\n
struct _FILE_OBJECT* FileObject; \/\/0x18
\n
union
\n
{
\n
struct
\n
{
\n
UCHAR ReplaceIfExists; \/\/0x20
\n
UCHAR AdvanceOnly; \/\/0x21
\n
};
\n
ULONG ClusterCount; \/\/0x20
\n
VOID* DeleteHandle; \/\/0x20
\n
};
\n
} SetFile; \/\/0x8
\n
struct
\n
{
\n
ULONG Length; \/\/0x8
\n
VOID* EaList; \/\/0x10
\n
ULONG EaListLength; \/\/0x18
\n
ULONG EaIndex; \/\/0x20
\n
} QueryEa; \/\/0x8
\n
struct
\n
{
\n
ULONG Length; \/\/0x8
\n
} SetEa; \/\/0x8
\n
struct
\n
{
\n
ULONG Length; \/\/0x8
\n
enum _FSINFOCLASS FsInformationClass; \/\/0x10
\n
} QueryVolume; \/\/0x8
\n
struct
\n
{
\n
ULONG Length; \/\/0x8
\n
enum _FSINFOCLASS FsInformationClass; \/\/0x10
\n
} SetVolume; \/\/0x8
\n
struct
\n
{
\n
ULONG OutputBufferLength; \/\/0x8
\n
ULONG InputBufferLength; \/\/0x10
\n
ULONG FsControlCode; \/\/0x18
\n
VOID* Type3InputBuffer; \/\/0x20
\n
} FileSystemControl; \/\/0x8
\n
struct
\n
{
\n
union _LARGE_INTEGER* Length; \/\/0x8
\n
ULONG Key; \/\/0x10
\n
union _LARGE_INTEGER ByteOffset; \/\/0x18
\n
} LockControl; \/\/0x8
\n
struct
\n
{
\n
ULONG OutputBufferLength; \/\/0x8
\n
ULONG InputBufferLength; \/\/0x10
\n
ULONG IoControlCode; \/\/0x18
\n
VOID* Type3InputBuffer; \/\/0x20
\n
} DeviceIoControl; \/\/0x8
\n
struct
\n
{
\n
ULONG SecurityInformation; \/\/0x8
\n
ULONG Length; \/\/0x10
\n
} QuerySecurity; \/\/0x8
\n
struct
\n
{
\n
ULONG SecurityInformation; \/\/0x8
\n
VOID* SecurityDescriptor; \/\/0x10
\n
} SetSecurity; \/\/0x8
\n
struct
\n
{
\n
struct _VPB* Vpb; \/\/0x8
\n
struct _DEVICE_OBJECT* DeviceObject; \/\/0x10
\n
} MountVolume; \/\/0x8
\n
struct
\n
{
\n
struct _VPB* Vpb; \/\/0x8
\n
struct _DEVICE_OBJECT* DeviceObject; \/\/0x10
\n
} VerifyVolume; \/\/0x8
\n
struct
\n
{
\n
struct _SCSI_REQUEST_BLOCK* Srb; \/\/0x8
\n
} Scsi; \/\/0x8
\n
struct
\n
{
\n
ULONG Length; \/\/0x8
\n
VOID* StartSid; \/\/0x10
\n
struct _FILE_GET_QUOTA_INFORMATION* SidList; \/\/0x18
\n
ULONG SidListLength; \/\/0x20
\n
} QueryQuota; \/\/0x8
\n
struct
\n
{
\n
ULONG Length; \/\/0x8
\n
} SetQuota; \/\/0x8
\n
struct
\n
{
\n
enum _DEVICE_RELATION_TYPE Type; \/\/0x8
\n
} QueryDeviceRelations; \/\/0x8
\n
struct
\n
{
\n
struct _GUID* InterfaceType; \/\/0x8
\n
USHORT Size; \/\/0x10
\n
USHORT Version; \/\/0x12
\n
struct _INTERFACE* Interface; \/\/0x18
\n
VOID* InterfaceSpecificData; \/\/0x20
\n
} QueryInterface; \/\/0x8
\n
struct
\n
{
\n
struct _DEVICE_CAPABILITIES* Capabilities; \/\/0x8
\n
} DeviceCapabilities; \/\/0x8
\n
struct
\n
{
\n
struct _IO_RESOURCE_REQUIREMENTS_LIST*
\n
IoResourceRequirementList; \/\/0x8
\n
} FilterResourceRequirements; \/\/0x8
\n
struct
\n
{
\n
ULONG WhichSpace; \/\/0x8
\n
VOID* Buffer; \/\/0x10
\n
ULONG Offset; \/\/0x18
\n
ULONG Length; \/\/0x20
\n
} ReadWriteConfig; \/\/0x8
\n
struct
\n
{
\n
UCHAR Lock; \/\/0x8
\n
} SetLock; \/\/0x8
\n
struct
\n
{
\n
enum BUS_QUERY_ID_TYPE IdType; \/\/0x8
\n
} QueryId; \/\/0x8
\n
struct
\n
{
\n
enum DEVICE_TEXT_TYPE DeviceTextType; \/\/0x8
\n
ULONG LocaleId; \/\/0x10
\n
} QueryDeviceText; \/\/0x8
\n
struct
\n
{
\n
UCHAR InPath; \/\/0x8
\n
UCHAR Reserved[3]; \/\/0x9
\n
enum _DEVICE_USAGE_NOTIFICATION_TYPE Type; \/\/0x10
\n
} UsageNotification; \/\/0x8
\n
struct
\n
{
\n
enum _SYSTEM_POWER_STATE PowerState; \/\/0x8
\n
} WaitWake; \/\/0x8
\n
struct
\n
{
\n
struct _POWER_SEQUENCE* PowerSequence; \/\/0x8
\n
} PowerSequence; \/\/0x8
\n
struct
\n
{
\n
union
\n
{
\n
ULONG SystemContext; \/\/0x8
\n
struct _SYSTEM_POWER_STATE_CONTEXT SystemPowerStateContext;
\n
\/\/0x8
\n
};
\n
enum _POWER_STATE_TYPE Type; \/\/0x10
\n
union _POWER_STATE State; \/\/0x18
\n
enum POWER_ACTION ShutdownType; \/\/0x20
\n
} Power; \/\/0x8
\n
struct
\n
{
\n
struct _CM_RESOURCE_LIST* AllocatedResources; \/\/0x8
\n
struct _CM_RESOURCE_LIST* AllocatedResourcesTranslated; \/\/0x10
\n
} StartDevice; \/\/0x8
\n
struct
\n
{
\n
ULONGLONG ProviderId; \/\/0x8
\n
VOID* DataPath; \/\/0x10
\n
ULONG BufferSize; \/\/0x18
\n
VOID* Buffer; \/\/0x20
\n
} WMI; \/\/0x8
\n
struct
\n
{
\n
VOID* Argument1; \/\/0x8
\n
VOID* Argument2; \/\/0x10
\n
VOID* Argument3; \/\/0x18
\n
VOID* Argument4; \/\/0x20
\n
} Others; \/\/0x8
\n
} Parameters; \/\/0x8
\n
struct _DEVICE_OBJECT* DeviceObject; \/\/0x28
\n
struct _FILE_OBJECT* FileObject; \/\/0x30
\n
LONG(*CompletionRoutine)(struct _DEVICE_OBJECT* arg1, struct _IRP*
\n
arg2, VOID* arg3); \/\/0x38
\n
VOID* Context; \/\/0x40
\n
}IO_STACK_LOCATION;<\/p>\n
\/\/0x18 bytes (sizeof)
\n
struct _KDEVICE_QUEUE_ENTRY
\n
{
\n
struct _LIST_ENTRY DeviceListEntry; \/\/0x0
\n
ULONG SortKey; \/\/0x10
\n
UCHAR Inserted; \/\/0x14
\n
};<\/p>\n
\/\/0x58 bytes (sizeof)
\n
struct _KAPC
\n
{
\n
UCHAR Type; \/\/0x0
\n
UCHAR AllFlags; \/\/0x1
\n
UCHAR Size; \/\/0x2
\n
UCHAR SpareByte1; \/\/0x3
\n
ULONG SpareLong0; \/\/0x4
\n
struct _KTHREAD* Thread; \/\/0x8
\n
struct _LIST_ENTRY ApcListEntry; \/\/0x10
\n
VOID* Reserved[3]; \/\/0x20
\n
VOID* NormalContext; \/\/0x38
\n
VOID* SystemArgument1; \/\/0x40
\n
VOID* SystemArgument2; \/\/0x48
\n
CHAR ApcStateIndex; \/\/0x50
\n
CHAR ApcMode; \/\/0x51
\n
UCHAR Inserted; \/\/0x52
\n
};
\n
\/\/0xd0 bytes (sizeof)
\n
struct _IRP
\n
{
\n
SHORT Type; \/\/0x0
\n
USHORT Size; \/\/0x2
\n
USHORT AllocationProcessorNumber; \/\/0x4
\n
USHORT Reserved; \/\/0x6
\n
struct _MDL* MdlAddress; \/\/0x8
\n
ULONG Flags; \/\/0x10
\n
union
\n
{
\n
struct _IRP* MasterIrp; \/\/0x18
\n
LONG IrpCount; \/\/0x18
\n
VOID* SystemBuffer; \/\/0x18
\n
} AssociatedIrp; \/\/0x18
\n
struct _LIST_ENTRY ThreadListEntry; \/\/0x20
\n
struct IO_STATUS_BLOCK IoStatus; \/\/0x30
\n
CHAR RequestorMode; \/\/0x40
\n
UCHAR PendingReturned; \/\/0x41
\n
CHAR StackCount; \/\/0x42
\n
CHAR CurrentLocation; \/\/0x43
\n
UCHAR Cancel; \/\/0x44
\n
UCHAR CancelIrql; \/\/0x45
\n
CHAR ApcEnvironment; \/\/0x46
\n
UCHAR AllocationFlags; \/\/0x47
\n
union
\n
{
\n
struct _IO_STATUS_BLOCK* UserIosb; \/\/0x48
\n
VOID* IoRingContext; \/\/0x48
\n
};
\n
struct _KEVENT* UserEvent; \/\/0x50
\n
union
\n
{
\n
struct
\n
{
\n
union
\n
{
\n
VOID(*UserApcRoutine)(VOID* arg1, struct _IO_STATUS_BLOCK*
\n
arg2, ULONG arg3); \/\/0x58
\n
VOID* IssuingProcess; \/\/0x58
\n
};
\n
union
\n
{
\n
VOID* UserApcContext; \/\/0x60
\n
struct _IORING_OBJECT* IoRing; \/\/0x60
\n
};
\n
} AsynchronousParameters; \/\/0x58
\n
union _LARGE_INTEGER AllocationSize; \/\/0x58
\n
} Overlay; \/\/0x58
\n
VOID(*CancelRoutine)(struct _DEVICE_OBJECT* arg1, struct _IRP* arg2);
\n
\/\/0x68
\n
VOID* UserBuffer; \/\/0x70
\n
union
\n
{
\n
struct
\n
{
\n
union
\n
{
\n
struct _KDEVICE_QUEUE_ENTRY DeviceQueueEntry; \/\/0x78
\n
VOID* DriverContext[4]; \/\/0x78
\n
};
\n
struct _ETHREAD* Thread; \/\/0x98
\n
CHAR* AuxiliaryBuffer; \/\/0xa0
\n
struct _LIST_ENTRY ListEntry; \/\/0xa8
\n
union
\n
{
\n
struct _IO_STACK_LOCATION* CurrentStackLocation; \/\/0xb8
\n
ULONG PacketType; \/\/0xb8
\n
};
\n
struct _FILE_OBJECT* OriginalFileObject; \/\/0xc0
\n
VOID* IrpExtension; \/\/0xc8
\n
} Overlay; \/\/0x78
\n
struct _KAPC Apc; \/\/0x78
\n
VOID* CompletionKey; \/\/0x78
\n
} Tail; \/\/0x78
\n
};
\n
typedef struct _TA_ADDRESS
\n
{
\n
USHORT AddressLength;
\n
USHORT AddressType;
\n
UCHAR Address[1];
\n
}TA_ADDRESS;<\/p>\n
typedef struct _TRANSPORT_ADDRESS
\n
{
\n
LONG TAAddressCount;
\n
TA_ADDRESS Address[1];
\n
}TRANSPORT_ADDRESS;<\/p>\n
typedef struct _UNICODE_STRING {
\n
USHORT Length;
\n
USHORT MaximumLength;
\n
PWSTR Buffer;
\n
} UNICODE_STRING, * PUNICODE_STRING;<\/p>\n
typedef struct _OBJECT_ATTRIBUTES
\n
{
\n
ULONG Length;
\n
HANDLE RootDirectory;
\n
PUNICODE_STRING ObjectName;
\n
ULONG Attributes;
\n
PVOID SecurityDescriptor;
\n
PVOID SecurityQualityOfService;
\n
}OBJECT_ATTRIBUTES, * POBJECT_ATTRIBUTES;<\/p>\n
typedef struct _SYSTEM_MODULE_ENTRY
\n
{
\n
HANDLE Section;
\n
PVOID MappedBase;
\n
PVOID ImageBase;
\n
ULONG ImageSize;
\n
ULONG Flags;
\n
USHORT LoadOrderIndex;
\n
USHORT InitOrderIndex;
\n
USHORT LoadCount;
\n
USHORT OffsetToFileName;
\n
UCHAR FullPathName[256];
\n
} SYSTEM_MODULE_ENTRY, * PSYSTEM_MODULE_ENTRY;<\/p>\n
typedef struct _SYSTEM_MODULE_INFORMATION
\n
{
\n
ULONG Count;
\n
SYSTEM_MODULE_ENTRY Module[1];
\n
} SYSTEM_MODULE_INFORMATION, * PSYSTEM_MODULE_INFORMATION;<\/p>\n
typedef struct _SYSTEM_HANDLE_TABLE_ENTRY_INFO_EX
\n
{
\n
PVOID Object;
\n
ULONG_PTR UniqueProcessId;
\n
ULONG_PTR HandleValue;
\n
ULONG GrantedAccess;
\n
USHORT CreatorBackTraceIndex;
\n
USHORT ObjectTypeIndex;
\n
ULONG HandleAttributes;
\n
ULONG Reserved;
\n
} SYSTEM_HANDLE_TABLE_ENTRY_INFO_EX, * PSYSTEM_HANDLE_TABLE_ENTRY_INFO_EX;<\/p>\n
typedef struct _SYSTEM_HANDLE_INFORMATION_EX
\n
{
\n
ULONG_PTR NumberOfHandles;
\n
ULONG_PTR Reserved;
\n
SYSTEM_HANDLE_TABLE_ENTRY_INFO_EX Handles[1];
\n
} SYSTEM_HANDLE_INFORMATION_EX, * PSYSTEM_HANDLE_INFORMATION_EX;<\/p>\n
typedef struct _AFD_CREATE_PACKET {
\n
\/\/FILE_FULL_EA_INFORMATION
\n
ULONG NextEntryOffset;
\n
WORD Flags;
\n
UCHAR EaNameLength;
\n
USHORT EaValueLength;
\n
CHAR EaName[15];<\/p>\n
\/\/AFD_CREATE_PACKET
\n
ULONG EndpointFlags;
\n
ULONG GroupID;
\n
ULONG AddressFamily;
\n
ULONG SocketType;
\n
ULONG Protocol;
\n
ULONG SizeOfTransportName;
\n
wchar_t TransportName[16];
\n
\/\/UCHAR Unkown;
\n
} AFD_CREATE_PACKET;<\/p>\n
enum THREADINFOCLASS { ThreadImpersonationToken = 5 };<\/p>\n
enum SYSTEM_INFORMATION_CLASS {
\n
SystemModuleInformation = 11,
\n
SystemExtendedHandleInformation = 64
\n
};<\/p>\n
typedef enum EVENT_TYPE {
\n
NotificationEvent,
\n
SynchronizationEvent
\n
};<\/p>\n
typedef struct _AFD_BIND_DATA {
\n
ULONG ShareType;
\n
SOCKADDR_IN addr;
\n
} AFD_BIND_DATA, * PAFD_BIND_DATA;<\/p>\n
typedef struct alignas(16) MY_AFD_CONNECT_INFO
\n
{
\n
__int64 UseSan;
\n
__int64 hNtSock1;
\n
__int64 Unknown;
\n
__int32 tmp6;
\n
WORD const_16;
\n
sockaddr_in bind;
\n
};<\/p>\n
typedef struct FAKE_DATA_ENTRY_QUEUE
\n
{
\n
DWORD tmp;
\n
LIST_ENTRY nextQueue;
\n
__int64 unknown;
\n
PVOID security_client_context;
\n
__int64 unknown2;
\n
__int64 sizeOfData;
\n
char DATA[0x77FD0];
\n
};<\/p>\n
typedef struct _AFD_LISTEN_INFO {<\/p>\n
ULONG unknown;
\n
__int64 MaximumConnectionQueue;
\n
} AFD_LISTEN_INFO, * PAFD_LISTEN_INFO;<\/p>\n
typedef struct _SECURITY_CLIENT_CONTEXT
\n
{
\n
_SECURITY_QUALITY_OF_SERVICE SecurityQos;
\n
void* ClientToken;
\n
unsigned __int8 DirectlyAccessClientToken;
\n
unsigned __int8 DirectAccessEffectiveOnly;
\n
unsigned __int8 ServerIsRemote;
\n
_TOKEN_CONTROL ClientTokenControl;
\n
}SECURITY_CLIENT_CONTEXT, * PSECURITY_CLIENT_CONTEXT;<\/p>\n
struct __declspec(align(8)) _OWNER_ENTRY
\n
{
\n
unsigned __int64 OwnerThread;
\n
DWORD ___u1;
\n
};<\/p>\n
\/\/0x68 bytes (sizeof)
\n
typedef struct _ERESOURCE
\n
{
\n
struct _LIST_ENTRY SystemResourcesList; \/\/0x0
\n
struct _OWNER_ENTRY* OwnerTable; \/\/0x10
\n
SHORT ActiveCount; \/\/0x18
\n
union
\n
{
\n
USHORT Flag; \/\/0x1a
\n
struct
\n
{
\n
UCHAR ReservedLowFlags; \/\/0x1a
\n
UCHAR WaiterPriority; \/\/0x1b
\n
};
\n
};
\n
VOID* SharedWaiters; \/\/0x20
\n
VOID* ExclusiveWaiters; \/\/0x28
\n
struct _OWNER_ENTRY OwnerEntry; \/\/0x30
\n
ULONG ActiveEntries; \/\/0x40
\n
ULONG ContentionCount; \/\/0x44
\n
ULONG NumberOfSharedWaiters; \/\/0x48
\n
ULONG NumberOfExclusiveWaiters; \/\/0x4c
\n
VOID* Reserved2; \/\/0x50
\n
union
\n
{
\n
VOID* Address; \/\/0x58
\n
ULONGLONG CreatorBackTraceIndex; \/\/0x58
\n
};
\n
ULONGLONG SpinLock; \/\/0x60
\n
}ERESOURCE, *PERESOURCE;<\/p>\n
\/\/0x8 bytes (sizeof)
\n
typedef struct _EX_PUSH_LOCK
\n
{
\n
union
\n
{
\n
struct
\n
{
\n
ULONGLONG Locked : 1; \/\/0x0
\n
ULONGLONG Waiting : 1; \/\/0x0
\n
ULONGLONG Waking : 1; \/\/0x0
\n
ULONGLONG MultipleShared : 1; \/\/0x0
\n
ULONGLONG Shared : 60; \/\/0x0
\n
};
\n
ULONGLONG Value; \/\/0x0
\n
VOID* Ptr; \/\/0x0
\n
};
\n
};<\/p>\n
\/\/0x10 bytes (sizeof)
\n
typedef struct _SEP_CACHED_HANDLES_TABLE
\n
{
\n
struct _EX_PUSH_LOCK Lock; \/\/0x0
\n
struct _RTL_DYNAMIC_HASH_TABLE* HashTable; \/\/0x8
\n
};<\/p>\n
\/\/0x8 bytes (sizeof)
\n
typedef struct _EX_RUNDOWN_REF
\n
{
\n
union
\n
{
\n
ULONGLONG Count; \/\/0x0
\n
VOID* Ptr; \/\/0x0
\n
};
\n
};<\/p>\n
\/\/0x20 bytes (sizeof)
\n
typedef struct _OB_HANDLE_REVOCATION_BLOCK
\n
{
\n
struct _LIST_ENTRY RevocationInfos; \/\/0x0
\n
struct _EX_PUSH_LOCK Lock; \/\/0x10
\n
struct _EX_RUNDOWN_REF Rundown; \/\/0x18
\n
};<\/p>\n
\/\/0xc0 bytes (sizeof)
\n
typedef struct _SEP_LOGON_SESSION_REFERENCES
\n
{
\n
struct _SEP_LOGON_SESSION_REFERENCES* Next; \/\/0x0
\n
struct _LUID LogonId; \/\/0x8
\n
struct _LUID BuddyLogonId; \/\/0x10
\n
LONGLONG ReferenceCount; \/\/0x18
\n
ULONG Flags; \/\/0x20
\n
struct _DEVICE_MAP* pDeviceMap; \/\/0x28
\n
VOID* Token; \/\/0x30
\n
struct _UNICODE_STRING AccountName; \/\/0x38
\n
struct _UNICODE_STRING AuthorityName; \/\/0x48
\n
struct _SEP_CACHED_HANDLES_TABLE CachedHandlesTable; \/\/0x58
\n
struct _EX_PUSH_LOCK SharedDataLock; \/\/0x68
\n
struct _AUTHZBASEP_CLAIM_ATTRIBUTES_COLLECTION* SharedClaimAttributes;
\n
\/\/0x70
\n
struct _SEP_SID_VALUES_BLOCK* SharedSidValues; \/\/0x78
\n
struct _OB_HANDLE_REVOCATION_BLOCK RevocationBlock; \/\/0x80
\n
struct _EJOB* ServerSilo; \/\/0xa0
\n
struct _LUID SiblingAuthId; \/\/0xa8
\n
struct _LIST_ENTRY TokenList; \/\/0xb0
\n
};
\n
\/\/0x30 bytes (sizeof)
\n
typedef struct _AUTHZBASEP_SECURITY_ATTRIBUTES_INFORMATION
\n
{
\n
ULONG SecurityAttributeCount; \/\/0x0
\n
struct _LIST_ENTRY SecurityAttributesList; \/\/0x8
\n
ULONG WorkingSecurityAttributeCount; \/\/0x18
\n
struct _LIST_ENTRY WorkingSecurityAttributesList; \/\/0x20
\n
}AUTHZBASEP_SECURITY_ATTRIBUTES_INFORMATION;<\/p>\n
\/\/0x20 bytes (sizeof)
\n
typedef struct _SEP_SID_VALUES_BLOCK
\n
{
\n
ULONG BlockLength; \/\/0x0
\n
LONGLONG ReferenceCount; \/\/0x8
\n
ULONG SidCount; \/\/0x10
\n
ULONGLONG SidValuesStart; \/\/0x18
\n
}SEP_SID_VALUES_BLOCK,*PSEP_SID_VALUES_BLOCK;<\/p>\n
\/\/0x18 bytes (sizeof)
\n
struct _SEP_TOKEN_PRIVILEGES
\n
{
\n
ULONGLONG Present; \/\/0x0
\n
ULONGLONG Enabled; \/\/0x8
\n
ULONGLONG EnabledByDefault; \/\/0x10
\n
};<\/p>\n
\/\/0x1f bytes (sizeof)
\n
struct _SEP_AUDIT_POLICY
\n
{
\n
struct _TOKEN_AUDIT_POLICY AdtTokenPolicy; \/\/0x0
\n
UCHAR PolicySetStatus; \/\/0x1e
\n
};<\/p>\n
\/\/0x498 bytes (sizeof)
\n
struct _TOKEN
\n
{
\n
struct _TOKEN_SOURCE TokenSource; \/\/0x0
\n
struct _LUID TokenId; \/\/0x10
\n
struct _LUID AuthenticationId; \/\/0x18
\n
struct _LUID ParentTokenId; \/\/0x20
\n
union _LARGE_INTEGER ExpirationTime; \/\/0x28
\n
struct _ERESOURCE* TokenLock; \/\/0x30
\n
struct _LUID ModifiedId; \/\/0x38
\n
struct _SEP_TOKEN_PRIVILEGES Privileges; \/\/0x40
\n
struct _SEP_AUDIT_POLICY AuditPolicy; \/\/0x58
\n
ULONG SessionId; \/\/0x78
\n
ULONG UserAndGroupCount; \/\/0x7c
\n
ULONG RestrictedSidCount; \/\/0x80
\n
ULONG VariableLength; \/\/0x84
\n
ULONG DynamicCharged; \/\/0x88
\n
ULONG DynamicAvailable; \/\/0x8c
\n
ULONG DefaultOwnerIndex; \/\/0x90
\n
struct _SID_AND_ATTRIBUTES* UserAndGroups; \/\/0x98
\n
struct _SID_AND_ATTRIBUTES* RestrictedSids; \/\/0xa0
\n
VOID* PrimaryGroup; \/\/0xa8
\n
ULONG* DynamicPart; \/\/0xb0
\n
struct _ACL* DefaultDacl; \/\/0xb8
\n
enum _TOKEN_TYPE TokenType; \/\/0xc0
\n
enum _SECURITY_IMPERSONATION_LEVEL ImpersonationLevel; \/\/0xc4
\n
ULONG TokenFlags; \/\/0xc8
\n
UCHAR TokenInUse; \/\/0xcc
\n
ULONG IntegrityLevelIndex; \/\/0xd0
\n
ULONG MandatoryPolicy; \/\/0xd4
\n
void* LogonSession; \/\/0xd8
\n
struct _LUID OriginatingLogonSession; \/\/0xe0
\n
struct _SID_AND_ATTRIBUTES_HASH SidHash; \/\/0xe8
\n
struct _SID_AND_ATTRIBUTES_HASH RestrictedSidHash; \/\/0x1f8
\n
struct _AUTHZBASEP_SECURITY_ATTRIBUTES_INFORMATION*
\n
pSecurityAttributes; \/\/0x308
\n
VOID* Package; \/\/0x310
\n
struct _SID_AND_ATTRIBUTES* Capabilities; \/\/0x318
\n
ULONG CapabilityCount; \/\/0x320
\n
struct _SID_AND_ATTRIBUTES_HASH CapabilitiesHash; \/\/0x328
\n
struct _SEP_LOWBOX_NUMBER_ENTRY* LowboxNumberEntry; \/\/0x438
\n
struct _SEP_CACHED_HANDLES_ENTRY* LowboxHandlesEntry; \/\/0x440
\n
struct _AUTHZBASEP_CLAIM_ATTRIBUTES_COLLECTION* pClaimAttributes;
\n
\/\/0x448
\n
VOID* TrustLevelSid; \/\/0x450
\n
struct _TOKEN* TrustLinkedToken; \/\/0x458
\n
VOID* IntegrityLevelSidValue; \/\/0x460
\n
struct _SEP_SID_VALUES_BLOCK* TokenSidValues; \/\/0x468
\n
struct _SEP_LUID_TO_INDEX_MAP_ENTRY* IndexEntry; \/\/0x470
\n
struct _SEP_TOKEN_DIAG_TRACK_ENTRY* DiagnosticInfo; \/\/0x478
\n
struct _SEP_CACHED_HANDLES_ENTRY* BnoIsolationHandlesEntry; \/\/0x480
\n
VOID* SessionObject; \/\/0x488
\n
ULONGLONG VariablePart; \/\/0x490
\n
};<\/p>\n
\/\/0x38 bytes (sizeof)
\n
struct _OBJECT_HEADER
\n
{
\n
LONGLONG PointerCount; \/\/0x0
\n
union
\n
{
\n
LONGLONG HandleCount; \/\/0x8
\n
VOID* NextToFree; \/\/0x8
\n
};
\n
struct _EX_PUSH_LOCK Lock; \/\/0x10
\n
UCHAR TypeIndex; \/\/0x18
\n
union
\n
{
\n
UCHAR TraceFlags; \/\/0x19
\n
struct
\n
{
\n
UCHAR DbgRefTrace : 1; \/\/0x19
\n
UCHAR DbgTracePermanent : 1; \/\/0x19
\n
};
\n
};
\n
UCHAR InfoMask; \/\/0x1a
\n
union
\n
{
\n
UCHAR Flags; \/\/0x1b
\n
struct
\n
{
\n
UCHAR NewObject : 1; \/\/0x1b
\n
UCHAR KernelObject : 1; \/\/0x1b
\n
UCHAR KernelOnlyAccess : 1; \/\/0x1b
\n
UCHAR ExclusiveObject : 1; \/\/0x1b
\n
UCHAR PermanentObject : 1; \/\/0x1b
\n
UCHAR DefaultSecurityQuota : 1; \/\/0x1b
\n
UCHAR SingleHandleEntry : 1; \/\/0x1b
\n
UCHAR DeletedInline : 1; \/\/0x1b
\n
};
\n
};
\n
ULONG Reserved; \/\/0x1c
\n
union
\n
{
\n
struct _OBJECT_CREATE_INFORMATION* ObjectCreateInfo; \/\/0x20
\n
VOID* QuotaBlockCharged; \/\/0x20
\n
};
\n
VOID* SecurityDescriptor; \/\/0x28
\n
struct _TOKEN Body; \/\/0x30
\n
};<\/p>\n
struct mm {
\n
void* fake_data_entry;
\n
void* input;
\n
_IRP* crafted_irp;
\n
IO_STACK_LOCATION *crafted_arbitrary_io_stack_location;
\n
void* p_mem_0x30;
\n
void* p_mem_0xD0_2;
\n
_AUTHZBASEP_SECURITY_ATTRIBUTES_INFORMATION* pSecurityAttributes;
\n
ACL* VariablePartDefaultDacl;
\n
ACL* VariablePartDefaultDacl2;
\n
_ERESOURCE* TokenLock;
\n
void* PrimaryGroup;
\n
int sizeOfClientTokenAndObjectHeader;
\n
PSEP_SID_VALUES_BLOCK TokenSidValues;
\n
_SECURITY_CLIENT_CONTEXT* security_client_context;
\n
_SEP_LOGON_SESSION_REFERENCES* LogonSession;
\n
_TOKEN* fakeToken;
\n
void *pipe_100_im_control_block;
\n
void* pipe_100_rw_control_block;
\n
void* p_mem_Pipe_hToPipe_1000_rw;
\n
void* p_mem_Pipe_hToPipe_1000_rw_2;
\n
HANDLE hPipeIM;
\n
HANDLE hPipeRW;
\n
HANDLE hFileIM;
\n
HANDLE hFileRW;
\n
HANDLE IncPrimitiveTOKEN;
\n
HANDLE RWPrimitiveTOKEN;
\n
};<\/p>\n
\/\/0x18 bytes (sizeof)
\n
struct _DISPATCHER_HEADER
\n
{
\n
union
\n
{
\n
volatile LONG Lock; \/\/0x0
\n
LONG LockNV; \/\/0x0
\n
struct
\n
{
\n
UCHAR Type; \/\/0x0
\n
UCHAR Signalling; \/\/0x1
\n
UCHAR Size; \/\/0x2
\n
UCHAR Reserved1; \/\/0x3
\n
};
\n
struct
\n
{
\n
UCHAR TimerType; \/\/0x0
\n
union
\n
{
\n
UCHAR TimerControlFlags; \/\/0x1
\n
struct
\n
{
\n
UCHAR Absolute : 1;\n<\/div>\n
View Full Exploit Details<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"Exploit Details Basic Information Exploit Title Microsoft Windows 11 Pro 23H2 – Ancillary Function Driver for WinSock Privilege Escalation Exploit ID EDB-ID:52284 Type exploitdb Published…<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3],"tags":[6,8,28,12,40,15,13,7,11,5],"class_list":["post-3807","post","type-post","status-publish","format-standard","hentry","category-category_exploit","tag-cve","tag-cvss","tag-cvss-78","tag-exploit","tag-exploitdb","tag-high","tag-news","tag-security","tag-tapic","tag-vulnerability"],"yoast_head":"\n
Microsoft Windows 11 Pro 23H2 - Ancillary Function Driver for WinSock Privilege Escalation - zero redgem<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/zero.redgem.net\/?p=3807\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Microsoft Windows 11 Pro 23H2 - Ancillary Function Driver for WinSock Privilege Escalation - zero redgem\" \/>\n<meta property=\"og:description\" content=\"Exploit Details Basic Information Exploit Title Microsoft Windows 11 Pro 23H2 – Ancillary Function Driver for WinSock Privilege Escalation Exploit ID EDB-ID:52284 Type exploitdb Published...\" \/>\n<meta property=\"og:url\" content=\"https:\/\/zero.redgem.net\/?p=3807\" \/>\n<meta property=\"og:site_name\" content=\"zero redgem\" \/>\n<meta property=\"article:published_time\" content=\"2025-05-09T14:43:21+00:00\" \/>\n<meta name=\"author\" content=\"invoker\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"invoker\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"12 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/?p=3807#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/?p=3807\"},\"author\":{\"name\":\"invoker\",\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#\\\/schema\\\/person\\\/fbfeae8dfad117ac08a7621bee1a1dca\"},\"headline\":\"Microsoft Windows 11 Pro 23H2 – Ancillary Function Driver for WinSock Privilege Escalation\",\"datePublished\":\"2025-05-09T14:43:21+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/?p=3807\"},\"wordCount\":2400,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#organization\"},\"keywords\":[\"CVE\",\"CVSS\",\"CVSS-7.8\",\"exploit\",\"exploitdb\",\"HIGH\",\"news\",\"Security\",\"tapic\",\"Vulnerability\"],\"articleSection\":[\"category_exploit\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/zero.redgem.net\\\/?p=3807#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/?p=3807\",\"url\":\"https:\\\/\\\/zero.redgem.net\\\/?p=3807\",\"name\":\"Microsoft Windows 11 Pro 23H2 - Ancillary Function Driver for WinSock Privilege Escalation - zero redgem\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#website\"},\"datePublished\":\"2025-05-09T14:43:21+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/?p=3807#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/zero.redgem.net\\\/?p=3807\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/?p=3807#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/zero.redgem.net\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Microsoft Windows 11 Pro 23H2 – Ancillary Function Driver for WinSock Privilege Escalation\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#website\",\"url\":\"https:\\\/\\\/zero.redgem.net\\\/\",\"name\":\"zero redgem\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/zero.redgem.net\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#organization\",\"name\":\"zero redgem\",\"url\":\"https:\\\/\\\/zero.redgem.net\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"\",\"contentUrl\":\"\",\"width\":191,\"height\":188,\"caption\":\"zero redgem\"},\"image\":{\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#\\\/schema\\\/logo\\\/image\\\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#\\\/schema\\\/person\\\/fbfeae8dfad117ac08a7621bee1a1dca\",\"name\":\"invoker\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/f17c01d7338e6932bcde121cf83569393df3374625d25afd62677cfb528f2e3e?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/f17c01d7338e6932bcde121cf83569393df3374625d25afd62677cfb528f2e3e?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/f17c01d7338e6932bcde121cf83569393df3374625d25afd62677cfb528f2e3e?s=96&d=mm&r=g\",\"caption\":\"invoker\"},\"sameAs\":[\"https:\\\/\\\/zero.redgem.net\"],\"url\":\"https:\\\/\\\/zero.redgem.net\\\/?author=1\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Microsoft Windows 11 Pro 23H2 - Ancillary Function Driver for WinSock Privilege Escalation - zero redgem","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/zero.redgem.net\/?p=3807","og_locale":"en_US","og_type":"article","og_title":"Microsoft Windows 11 Pro 23H2 - Ancillary Function Driver for WinSock Privilege Escalation - zero redgem","og_description":"Exploit Details Basic Information Exploit Title Microsoft Windows 11 Pro 23H2 – Ancillary Function Driver for WinSock Privilege Escalation Exploit ID EDB-ID:52284 Type exploitdb Published...","og_url":"https:\/\/zero.redgem.net\/?p=3807","og_site_name":"zero redgem","article_published_time":"2025-05-09T14:43:21+00:00","author":"invoker","twitter_card":"summary_large_image","twitter_misc":{"Written by":"invoker","Est. reading time":"12 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/zero.redgem.net\/?p=3807#article","isPartOf":{"@id":"https:\/\/zero.redgem.net\/?p=3807"},"author":{"name":"invoker","@id":"https:\/\/zero.redgem.net\/#\/schema\/person\/fbfeae8dfad117ac08a7621bee1a1dca"},"headline":"Microsoft Windows 11 Pro 23H2 – Ancillary Function Driver for WinSock Privilege Escalation","datePublished":"2025-05-09T14:43:21+00:00","mainEntityOfPage":{"@id":"https:\/\/zero.redgem.net\/?p=3807"},"wordCount":2400,"commentCount":0,"publisher":{"@id":"https:\/\/zero.redgem.net\/#organization"},"keywords":["CVE","CVSS","CVSS-7.8","exploit","exploitdb","HIGH","news","Security","tapic","Vulnerability"],"articleSection":["category_exploit"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/zero.redgem.net\/?p=3807#respond"]}]},{"@type":"WebPage","@id":"https:\/\/zero.redgem.net\/?p=3807","url":"https:\/\/zero.redgem.net\/?p=3807","name":"Microsoft Windows 11 Pro 23H2 - Ancillary Function Driver for WinSock Privilege Escalation - zero redgem","isPartOf":{"@id":"https:\/\/zero.redgem.net\/#website"},"datePublished":"2025-05-09T14:43:21+00:00","breadcrumb":{"@id":"https:\/\/zero.redgem.net\/?p=3807#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/zero.redgem.net\/?p=3807"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/zero.redgem.net\/?p=3807#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/zero.redgem.net\/"},{"@type":"ListItem","position":2,"name":"Microsoft Windows 11 Pro 23H2 – Ancillary Function Driver for WinSock Privilege Escalation"}]},{"@type":"WebSite","@id":"https:\/\/zero.redgem.net\/#website","url":"https:\/\/zero.redgem.net\/","name":"zero redgem","description":"","publisher":{"@id":"https:\/\/zero.redgem.net\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/zero.redgem.net\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/zero.redgem.net\/#organization","name":"zero redgem","url":"https:\/\/zero.redgem.net\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/zero.redgem.net\/#\/schema\/logo\/image\/","url":"","contentUrl":"","width":191,"height":188,"caption":"zero redgem"},"image":{"@id":"https:\/\/zero.redgem.net\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/zero.redgem.net\/#\/schema\/person\/fbfeae8dfad117ac08a7621bee1a1dca","name":"invoker","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/f17c01d7338e6932bcde121cf83569393df3374625d25afd62677cfb528f2e3e?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/f17c01d7338e6932bcde121cf83569393df3374625d25afd62677cfb528f2e3e?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/f17c01d7338e6932bcde121cf83569393df3374625d25afd62677cfb528f2e3e?s=96&d=mm&r=g","caption":"invoker"},"sameAs":["https:\/\/zero.redgem.net"],"url":"https:\/\/zero.redgem.net\/?author=1"}]}},"_links":{"self":[{"href":"https:\/\/zero.redgem.net\/index.php?rest_route=\/wp\/v2\/posts\/3807","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/zero.redgem.net\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/zero.redgem.net\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/zero.redgem.net\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/zero.redgem.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=3807"}],"version-history":[{"count":0,"href":"https:\/\/zero.redgem.net\/index.php?rest_route=\/wp\/v2\/posts\/3807\/revisions"}],"wp:attachment":[{"href":"https:\/\/zero.redgem.net\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=3807"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/zero.redgem.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=3807"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/zero.redgem.net\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=3807"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}