someday

The goal of this challenge is to escalate to SYSTEM and read the flag at \.\PhysicalDrive1. A patched vhdmp.sys is provided for the player. Players are advised to use the provided vhdmp.sys, load it in vmware or hyperv and work on it.

For convenience, a directory at C:\Users\Public\tmp has been created and excluded from Windows Defender scans, so that players can run their exploit without needing to bypass Windows Defender.