you can't be serious

John Hammond · 20 min

The video runs the Broken Pipe local privilege escalation proof-of-concept against the Steam client service on Windows 11, starting from a standard user account. It walks through the PowerShell and C++ source and explains how the exploit uses Steam's IPC allowlist mechanism to run a chosen executable as SYSTEM. It also shows Windows Defender blocking an initial attempt and the exploit being re-run.