
Windows Local Privilege Escalation Exploit Demonstrated via Steam with BrokenPipe Tool
cybersecurityprivilege escalationWindowsexploitSteamvulnerabilityproof of conceptsystem accessWindows Defendersecurity demonstration
A cybersecurity demonstration shows a local privilege escalation (LPE) exploit being executed on a Windows system while Steam is running. The analyst runs a proof of concept tool called brokenpipe.exe, credited to Nightmare Eclipse, from a low privilege user account. Windows Defender antivirus initially blocks the first execution attempt. On the second attempt, the exploit successfully launches a system shell with NT AUTHORITY SYSTEM privileges, demonstrating escalation from a low privilege user to the highest level of system access. The exploit appears to temporarily borrow admin privileges to achieve this escalation.