MSNightmare/RoguePlanet

Health v2 · maintenance only

Flags: no_releases young

Adoption not part of the score

1618 stars · 626 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

RoguePlanet is a proof-of-concept exploit for a Windows Defender vulnerability written in C++. It uses a race condition (triggered via ISO mounting) to escalate privileges and spawn a SYSTEM shell on patched Windows 10 and Windows 11 systems.

Use cases

• escalate privileges to SYSTEM on Windows 10/11
• demonstrate a Windows Defender vulnerability
• test endpoint hardening against race condition exploits
• verify whether a machine is vulnerable to the RoguePlanet bug
• study exploit techniques involving ISO mounting and race conditions

When to choose

• you need a working PoC for this specific Windows Defender LPE
• you are a security researcher studying race condition exploits on Windows
• you are validating defensive controls against privilege escalation on Windows 10/11

When to avoid

• you need a reliable exploit with guaranteed success - the race condition is hit-or-miss
• you target Windows Server - the PoC does not work there without redesign
• you need a maintained tool - it is a one-off PoC the author considers finished
• you need general-purpose security scanning rather than a specific exploit

Facets

cli-tool · maturity experimental

security penetration-testing vulnerability-scanning security windows developer-tools windows cpp cli exploit privilege-escalation windows-defender race-condition poc lpe

Member repositories

For agents

markdown · JSON · MCP: product_card(name="MSNightmare/RoguePlanet")