PoC demonstrating the use of cve-2020-1034 for privilege escalation. Tested on unpatched Windows 10 2004, build 19041.488.
Vulnerability was dicovered by Microsoft and fixed on patch Tuesday 8/9/2020: https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2020-1034
Part 1: https://windows-internals.com/exploiting-a-simple-vulnerability-in-35-easy-steps-or-less
Part 1.5 - information leak: https://windows-internals.com/exploiting-a-simple-vulnerability-part-1-5-the-info-leak/
Part 2 - https://windows-internals.com/exploiting-a-simple-vulnerability-part-2-what-if-we-made-exploitation-harder/