KillaBoi/BrokenPipe
Steam Client Service Local Privilege Escalation Vulnerability
About the project
PoC for a local privilege escalation in the Steam Client Service: abuses a genuine Valve-signed VDF install script with a caller-controlled install root to make the SYSTEM service launch an arbitrary executable without a UAC prompt.
Useful for
- Test the Steam Client Service vulnerability on your own Windows lab machine
- Reproduce obtaining a SYSTEM shell from a standard user without UAC
- Assess whether to update Steam or restrict the service in a corporate environment
README summarized by DeepSeek V4.1 Flash. Details may be inaccurate.
Why it’s trending
- 2 stars so far today, about 4 expected by the end of the day.
- Interest is fading: the two-day pace is 16% of the previous week and a half.
- The spike has held for 2 days in a row — not a one-off blip.
- The repository is 4 days old and already has 198 stars.
- Top new repositories this week: #57.
- About 12 forks a day — people are taking the code.
Stars per day
Bars are daily stars, the line is the usual pace. Red marks spike days.
Numbers
- Total stars
- 198
- Stars in a day
- 4
- Forks
- 49
- Issues and pull requests
- 0
- Watchers
- 4
- Language
- PowerShell
- License
- Apache-2.0
- Latest release
- 1 · September 14, 2026
- Created
- September 14, 2026
- Last push
- September 18, 2026
Star trust
Growth looks organic: forks and discussion are in line with active projects, and stars arrive unevenly, the way people give them.
These are heuristics, not a verdict: we judge by the repository’s behavior, not by a list of stargazers.
Spotted in
- September 18, 2026Top new repositories this week: #43
- September 17, 2026Top new repositories this week: #43
- September 16, 2026Top new repositories this week: #60
- September 15, 2026Top new repositories this week: #98
Share
README badge
Paste it into your README — the badge shows the current magnitude and links to this page.
[](https://gitnova.dev/en/r/KillaBoi/BrokenPipe)Similar projects
-
9.7
cloudflare/security-audit-skill
A coding-agent skill that turns the agent into a security auditor, running a multi-phase code audit with independently verified, machine-readable findings.
-
6.6
yynxxxxx/gpt_sub_analysis
A guide to analyzing the ChatGPT iOS subscription flow: it describes intercepting the buyProduct request via Reqable and SSL Kill Switch 3 and rewriting the offerName and salableAdamId fields to obtain the Pro 20x…
-
5.9
ctdal/cve-2026-41940-PoC
PoC exploit for CVE-2026-41940, a critical authentication bypass in cPanel & WHM (CVSS 10.0) that grants unauthenticated root-level WHM access by injecting CRLF sequences into server-side session files.
-
5.3
BennyThink/NFCX
Cross-platform GUI desktop app for NFC card work: reader discovery, MIFARE Classic reads, dumps, key management, and key recovery. For cards you own or are authorized to test.
-
5.0
NationalSecurityAgency/ghidra
A software reverse engineering framework from the NSA: disassembly, decompilation, graphing and scripting for analyzing compiled code on Windows, macOS and Linux.
-
4.6
shinthink/blitzstrike
A TypeScript/Bun MCP server packaging a pentest methodology into three tiers: attack-surface reconnaissance, source-to-sink tracing, and live validation of findings before reporting.