Blog posts:
- Research: https://syscall.eu/blog/2020/03/30/asus_gio/
- Exploitation: http://syscall.eu/blog/2020/04/04/asus_gio_exploit/
This exploit is an extension of ReWolf's exploit More info can be found here: http://blog.rewolf.pl/blog/?p=1630
- patched the C++ code to support compilation with MinGW
- added a Makefile
- added a provider for AsIO2
- added EPROCESS Token offset for recent Windows versions
- Install MinGW64:
apt install mingw-w64 - run
makeinMsiExploitfolder
- install python, make sure it's in your path
- pip install cryptodome
- run
nmake -f Makefile.nmakeinMsiExploitfolder