EDRSandblast-GodFault

EDRSandblast-GodFault By Gabriel Landau at Elastic Security. Modification of EDRSandblast - see original README below. Integrates GodFault into EDR Sandblast, achieving the same result without the use of any vulnerable drivers. Example Output C:\Users\user\Desktop\OffsetsEDRSandblast.exe...

LolDriverScan

LolDriverScan LolDriverScan is a golang tool that allows users to discover vulnerable drivers on their system. This tool fetches the loldrivers.io list from their APIs and scans the system for any vulnerable drivers This project is implemented in Go and does not require elevated privileges to run...

DIRT

DIRT: Driver Initial Reconnaissance Tool I'm writing this tool to learn C++ and get an initial assessment of drivers installed on a Windows system e.g. master images developed by OEMs or enterprises. It's supposed to help with target selection, finding low-hanging fruit, and some assistance with...

FDD-book

FreeBSD Device Drivers From First Steps to Kernel Mastery by Edson Brandi · Version 2.0 April 2026 About This Book FreeBSD Device Drivers: From First Steps to Kernel Mastery is a free, open-source book that takes you from "I've never written kernel code" to "I can write, debug, and submit...

ioctlance

IOCTLance Description Presented at CODE BLUE 2023, this project titled Enhanced Vulnerability Hunting in WDM Drivers with Symbolic Execution and Taint Analysis introduces IOCTLance, a tool that enhances its capacity to detect various vulnerability types in Windows Driver Model WDM drivers. In a...

openocd

Welcome to OpenOCD OpenOCD provides on-chip programming and debugging support with a layered architecture of JTAG interface and TAP support including: XSVF playback to facilitate automated boundary scan and FPGA/CPLD programming; debug target support e.g. ARM, MIPS: single-stepping,...

CVE-2021-3438

What is included? CVE-2021-3438detection v2sccm.ps1 is a script to run via sccm to get a small report on the vulnerability of managed devices. CVE-2021-3438detection.ps1 is a script to run manually or remote on a managed device. CVE-2021-3438remediation.ps1 is a script to check and run the...

dr_checker

DR.CHECKER : A Soundy Vulnerability Detection Tool for Linux Kernel Drivers This repo contains all the sources, including setup scripts. Now with an Amazing UI to view the warnings along with corresponding source files. Tested on Ubuntu = 14.04.5 LTS Announcements 16 Feb 2018 : DR.CHECKER has bee...

LOLDrivers

LOLDrivers - Living Off The Land Drivers 🚗💨 Welcome to LOLDrivers Living Off The Land Drivers, an exciting open-source project that brings together vulnerable, malicious, and known malicious Windows drivers in one comprehensive repository. Our mission is to empower organizations of all sizes with...

tcpreplay

Tcpreplay Tcpreplay is a suite of GPLv3 licensed utilities for UNIX and Windows under Cygwin for editing and replaying network traffic previously captured by tools like tcpdump and Wireshark. It classifies traffic as client or server, rewrites Layer 2/3/4 headers, and replays it back onto the...

kernel: net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink

A flaw was found in the Linux kernel's ip6gre and ip6erspan tunnel drivers. The changelink functions in these drivers do not adequately verify administrative capabilities CAPNETADMIN across different network namespaces. This allows a local attacker, who has CAPNETADMIN in one network namespace bu...

WinDriver-EXP

취약한 Windows 드라이버용 PoC 저장소 이 저장소에는 Windows 드라이버의 취약점에 대한 PoC 익스플로잇이 포함되어 있으며, 권한 상승, 임의 코드 실행 또는 기타 보안 위험을 초래할 수 있는 결함을 보여줍니다. 연구 및 교육 목적으로만 제공됩니다. PoC 목록 취약점| CVE ID| 구성 요소 ---|---|--- Windows 커널 권한 상승 취약점| CVE-2024-21338| appid.sys Windows 커널 스트리밍 권한 상승 취약점| CVE-2024-30084| ks.sys Microsoft 스트리밍...

wifit3

wifit3 A standalone USB Wi-Fi auditor for Linux, Windows, and macOS. At least one of the supported USB adapters is required. Why? Cross-Platform: Runs identically on Linux, macOS, and Windows. Wireless Driver Heaven: Built-in wireless stack avoids kernel driver versioning hell and Windows' NDIS...

rtl8812au

RTL8812AU/21AU 및 RTL8814AU 무선 드라이버 Linux 및 Android 전용 이 드라이버는 더 이상 사용되지 않습니다. 대신 mac80211 드라이버를 사용하세요: https://github.com/lwfinger/rtw88 중요! "ifconfig" 및 "iwconfig" 대신 "ip"와 "iw"를 사용하세요. 아래에 자세히 설명되어 있습니다. README를 읽으세요! 참고: TP-Link AC600 및 잠재적으로 다른 장치에서 회귀 문제가 있습니다. 현재 해결 방법은 이전 커밋에서 가져오는 것입니다. 이...

loldrivers-client

LOLDrivers-client The OG, blazingly fast , zero dependencies client for LOLDrivers by MagicSword. Scan your Windows computer for known vulnerable or malicious drivers. Installation Command Line Copy and paste the command below into a PowerShell terminal. This does not require an elevated...

ioctlance

IOCTLance 설명 2023 CODE BLUE에서 발표된 이 프로젝트제목: Enhanced Vulnerability Hunting in WDM Drivers with Symbolic Execution and Taint Analysis는 IOCTLance를 소개합니다. IOCTLance는 WDM 드라이버에서 다양한 취약점 유형을 탐지하는 능력을 향상시키는 도구입니다. 104개의 알려진 취약 WDM 드라이버와 328개의 알려지지 않은 드라이버를 포함한 종합적인 평가에서 IOCTLance는 26개의 개별 드라이버에서 117개의...

deep-pwning

Deep-pwning is a lightweight framework for experimenting with machine learning models with the goal of evaluating their robustness against a motivated adversary. Note that deep-pwning in its current state is no where close to maturity or completion. It is meant to be experimented with, expanded...

concealed_position

은밀한 위치 Concealed Position 은밀한 위치Concealed Position는 "자체 취약점 가져오기Bring Your Own Vulnerability" 개념을 사용한 Windows 로컬 권한 상승 공격입니다. 구체적으로, 은밀한 위치CP는 Windows에서 패키지 포인트 및 인쇄 로직의 설계된 대로 기능을 이용하여 낮은 권한의 사용자가 프린터 드라이버를 스테이징하고 설치할 수 있게 합니다. CP는 특히 알려진 취약점이 있는 드라이버를 설치한 후 이를 악용하여 SYSTEM으로 권한 상승합니다. 은밀한 위치는 DE...

TPMGenie

TPM Genie TPM Genie is designed to aid in vulnerability research of Trusted Platform Modules. As a serial bus interposer, TPM Genie is capable of intercepting and modifying all traffic that is sent across the I2C channel between the host machine and a discrete TPM chip. Outside of research, the...

qvm-create-windows-qube

Qvm-Create-Windows-Qube Spin up new Windows qubes quickly, effortlessly and securely About Qvm-Create-Windows-Qube is a tool for quickly and conveniently installing fresh new Windows qubes with Qubes Windows Tools QWT dr...