GenDigital Avast Antivirus ZeroDay Elevation of Privileges Vulnerability
Find a file
INFINITE NIGHTMARE 5e7e1680db
Update README.md
2026-08-30 18:48:27 +02:00
x64/Release Add files via upload 2026-08-30 18:44:10 +02:00
LICENSE Initial commit 2026-08-30 18:43:44 +02:00
main.cpp Add files via upload 2026-08-30 18:44:10 +02:00
ntdll.h Add files via upload 2026-08-30 18:44:10 +02:00
offreg.h Add files via upload 2026-08-30 18:44:10 +02:00
offreg.lib Add files via upload 2026-08-30 18:44:10 +02:00
PrettyPrague.slnx Add files via upload 2026-08-30 18:44:10 +02:00
PrettyPrague.vcxproj Add files via upload 2026-08-30 18:44:10 +02:00
PrettyPrague.vcxproj.filters Add files via upload 2026-08-30 18:44:10 +02:00
PrettyPrague.vcxproj.user Add files via upload 2026-08-30 18:44:10 +02:00
README.md Update README.md 2026-08-30 18:48:27 +02:00

PrettyPrague

GenDigital Avast Antivirus ZeroDay Elevation of Privileges Vulnerability

Another zeroday in an antimalware provider, I'm not sure but I believe this vulnerability affect other GenDigital products as well (such as AVG, Norton...)

For now the PoC is compatible with any version of Avast Antivirus.

The PoC will dump the SAM database by abusing a vulnerability in Avast Sandbox and spawn a full SYSTEM shell, at the time of writing this the PoC works with fully patched Avast Antivirus + Patched Windows 11 25H2

pl