MSNightmare/SignDrop
Windows Common Log FileSystem Authentication 0day Local Privilege Escalation Vulnerability
From the publisher
README & documentation
Source previewRead the project’s overview, installation instructions and usage examples. The original README is the source of truth.
This vulnerability won't affect all windows machines but I guess estimate 80% of the world's windows installations are vulnerable to this. To check, you need to run the proof of concept or check your registry configuration, if it spawns a SYSTEM shell, you're vulnerable. And you're generally vulnerable if your windows installation is older than 90 days so it's safe to assume that everyone reading this is definitely vulnerable. You might ask why, it's because it depends if the CLFS authentication mitigation is enabled or not, it's because of this : From Microsoft : Since October 28, 2025, Microsoft released the CLFS authentication mitigation in the official release channel to curb the exploitation of CLFS vulnerabilities since CLFS was an easy target to exploit since it parsed complex log files in kernel mode. So if anything goes wrong, it's a memory corruption that can be exploited to gain elevated privileges.…
Read the full README ↗ · Preview checked 2026-11-14T16:19:58.738Z
Inside the original README — Document outline
Headings are captured from the source. Links open the publisher’s document, not a locally hosted copy.
Links from the README
References supplied by the publisher, not independently verified endorsements. Check the destination before downloading files or entering credentials.
Documentation belongs to its respective authors. Reported project/model license: MIT. A listing is not a grant of reuse or training rights. Confirm the document’s own terms at the source.
What this repository does
Windows Common Log FileSystem Authentication 0day Local Privilege Escalation Vulnerability
Repository facts
- Owner
- MSNightmare
- Primary language
- C
- Stars
- 373
- Forks
- 88
- Open issues + pull requests
- 0
- License
- MIT
- Archived
- No
- Default branch
- main
- Created
- 2026-11-10T19:20:06.000Z
- Last push
- 2026-11-10T23:53:17.000Z
Topics and intended use
No topics were included in the latest source metadata.
Review the README for scope, installation, examples and limitations. We do not run repository code or certify it.
Evaluate before installing
Review licensing and dependencies, inspect recent commits and unresolved issues, and test in an isolated environment before production use. Stars and forks alone cannot answer these questions.
Source and freshness
Source: GitHub. Metadata observed 2026-11-14T12:24:55.365Z. Daily imports are snapshots, not real-time monitoring.
Popularity and source listings do not establish security, suitability, licensing rights or benchmark performance.