Ioctlance - A Tool That Is Used To Hunt Vulnerabilities In X64 WDM Drivers

A tool named IOCTLance detects various vulnerability types in X64 WDM drivers by enhancing its capacity to hunt vulnerabilities using symbolic execution and taint analysis. It successfully unveiled 117 previously unidentified vulnerabilities within 26 distinct drivers, reporting 41 CVEs for denial of service, insufficient access control, and elevation of privilege. It targets various vulnerability types including buffer overflow, null pointer dereference, and dangerous file operations. It supports optional customizations like a length limit, total timeout, and recursion for analysis