One Day Sec

What is the role of Capcom.sys in privilege escalation, and how is it exploited?

Capcom.sys is a legitimate driver from Capcom's Street Fighter V that contains a vulnerability allowing kernel code execution. After loading the driver using `sc create Capcom type= kernel binPath= C:\test\Capcom.sys` and starting it, an exploit program (e.g., ExploitCapcom) can be run even with regular user privileges to gain SYSTEM access. This method is specifically for x64 Windows 7 systems. See the Capcom.sys section for details.
Capcom.syskernel exploitdriver vulnerabilityprivilege escalationWindows 7 x64

Browse all Q&A →