Skip to content

Artifice / Devmode privilege escalation exploit

Metadata

Release date 10.09.2023
Author Kudayasu
Classification Devmode SystemOS privilege escalation
Patched No (as of October 1st 2023)
Patch date -
First patched system version -
Source https://kudayasu.github.io/an-autopsy-of-artifice/
Download https://github.com/Kudayasu/Artifice/releases/latest

Info

A completely privilege escalation exploit for Devmode, granting an admin account in SystemOS.

Prerequisites

  • Windows host computer
  • Console in devmode (UWP devkit or superior)

Instructions

Download the artifice release, make sure your console is reachable from the host computer, run the program and type the console IP. Then launch the exploit. If it succeeds, an account called admin with password admin will be created in SystemOS. You can ssh to this account.

Authors: Mick, Torus