# MSNightmare/RoguePlanet

RoguePlanet Windows Defender Vulnerability

Repository: https://github.com/MSNightmare/RoguePlanet
Canonical: https://ross.abutalabs.com/products/rogueplanet
Language: C++
License: MIT
License Family: permissive
Last push: 2026-06-09T19:58:22+00:00

## Health v2 (maintenance only)
Score: 52/100 (v2, computed 2026-09-03T02:20:16.233290+00:00)
- activity 86, release rhythm 35, longevity 6
- inputs: {"age_days": 85, "days_push": 85, "days_rel": null, "gap_med": null, "n_releases_24m": 0}
- flags: no_releases, young
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 1618, forks 626 (observed 2026-08-28T04:05:12.176660+00:00)

## What it is
RoguePlanet is a proof-of-concept exploit for a Windows Defender vulnerability written in C++. It uses a race condition (triggered via ISO mounting) to escalate privileges and spawn a SYSTEM shell on patched Windows 10 and Windows 11 systems.

## Use cases
- escalate privileges to SYSTEM on Windows 10/11
- demonstrate a Windows Defender vulnerability
- test endpoint hardening against race condition exploits
- verify whether a machine is vulnerable to the RoguePlanet bug
- study exploit techniques involving ISO mounting and race conditions

## When to choose
- you need a working PoC for this specific Windows Defender LPE
- you are a security researcher studying race condition exploits on Windows
- you are validating defensive controls against privilege escalation on Windows 10/11

## When to avoid
- you need a reliable exploit with guaranteed success - the race condition is hit-or-miss
- you target Windows Server - the PoC does not work there without redesign
- you need a maintained tool - it is a one-off PoC the author considers finished
- you need general-purpose security scanning rather than a specific exploit

## Facets
- artifact type: cli-tool
- maturity: experimental
- function: security, penetration-testing, vulnerability-scanning
- domain: security, windows, developer-tools
- platform: windows, cpp, cli
- tags: exploit, privilege-escalation, windows-defender, race-condition, poc, lpe

## Member repositories
- MSNightmare/RoguePlanet (main) score 52

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:05:12.176660+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T03:49:37.276275+00:00, confidence not recorded.
  - readme: https://github.com/MSNightmare/RoguePlanet (fetched 2026-08-28T04:05:12.176660+00:00, sha c95685ac8fb6)
- Data as of 2026-08-30T08:39:29.467469+00:00.
