CreateSymlink

Google Project Zero's Windows helper creates filesystem-visible pseudo-symlinks for authorized testing of privileged file-operation vulnerabilities. In its default mode it combines a directory junction with a temporary Object Manager symbolic link; the -p path uses DefineDosDevice as implemented in the reviewed source. Link creation is only a path-redirection primitive: a separate vulnerable privileged service or application must follow or write through it for an elevation-of-privilege result. The helper does not itself exploit a vulnerability, elevate privileges, or bypass UAC.