# KillaBoi/BrokenPipe

> PoC for a local privilege escalation in the Steam Client Service: abuses a genuine Valve-signed VDF install script with a caller-controlled install root to make the SYSTEM service launch an arbitrary executable without a UAC prompt.

- Magnitude: 0.0 out of 10 — Steady
- Stars: 223 total · +0 stars on 2026-09-30 (UTC)
- Star trust: star growth looks organic
- Category: Security · Language: PowerShell · License: Apache-2.0 · Created: 2026-09-14 · Last push: 2026-09-18
- GitHub: https://github.com/KillaBoi/BrokenPipe · Page: https://gitnova.dev/en/r/KillaBoi/BrokenPipe

## Useful for

- Test the Steam Client Service vulnerability on your own Windows lab machine
- Reproduce obtaining a SYSTEM shell from a standard user without UAC
- Assess whether to update Steam or restrict the service in a corporate environment

## Why it’s here

- The repository is 16 days old and already has 223 stars.

## Star trust

Star growth looks organic.

Star-trust labels are heuristics based on the repository’s behavior, not a check of every stargazer.

## Numbers

- Forks: 54
- Issues and pull requests: 0
- Watchers: 4
- Average over the last week: 1 per day
- Usual pace: 12 per day
- Latest release: 1 (2026-09-14)

## Stars per day, last 30 days (oldest → newest, today is partial)

2026-10-04 … 2026-11-02: None, None, None, None, None, None, None, None, None, None, None, None, None, None, None, None, None, None, None, None, None, None, None, None, None, None, None, None, None, None

## Magnitude by day, last 14 days

09-17 3.9, 09-18 2.7, 09-19 1.3, 09-20 1.2, 09-21 1.0, 09-22 1.1, 09-23 0.6, 09-24 0.6, 09-25 0.7, 09-26 0.6, 09-27 0.4, 09-28 0.0, 09-29 0.0, 09-30 0.0

---

Magnitude (0–10) measures how fast and how unusually interest in a repository is growing right now. It is not a quality score.
Days are UTC. “So far today” is a fact; “expected by the end of the day” is a forecast.
Summaries and use cases are written by an LLM (DeepSeek V4.1 Flash) from the README and may be inaccurate: verify specific claims (benchmarks, speed, hardware) in the repository itself.
Data as of 2026-09-30 23:58 UTC, updated every 30 minutes.