The repo contains a precompiled binary which can be run on a Windows machine vulnerable to CVE-2023-28252
The precompiled binary is a slightly modified version of the PoC exploit seen in fortra's repo.
The file can be run with the following arguments:
clfs_eop.exe <PAYLOAD> <OFFSET,optional> <FLAG,optional>
<PAYLOAD>
could be any payload you would like to run as nt system\authority if the exploit runs succesfully
<OFFSET,optional>
has a default value of 1208, see fortra's repo for an explanation how to find the right flag, if needed
<FLAG,optional>
has a default value of 1, see fortra's repo for an explanation how to find the right flag, if needed