LOLDrivers

LOLDrivers - Living Off The Land Drivers 🚗💨 Welcome to LOLDrivers Living Off The Land Drivers, an exciting open-source project that brings together vulnerable, malicious, and known malicious Windows drivers in one comprehensive repository. Our mission is to empower organizations of all sizes with...

goLoL

goLoL goLoL is a Windows host scanner with dual support for LOLBAS binaries and LOLDrivers. It lists LOLBAS techniques runnable at your current privilege level with MITRE ATT&CK mappings and can scan local .sys files for vulnerable/malicious LOLDrivers hash matches. Note: This is not an OPSEC saf...

DsArk64

DsArk64 DsArk64.sys ships with 360 Total Security. WHQL-signed by Microsoft. LOLDrivers: magicsword-io/LOLDrivers308. CVE: Requested MITRE. Primitives Process kill ring 0 IOCTL 0x80863008, input: 4-byte raw PID Driver calls ZwOpenProcessALLACCESS + ZwTerminateProcess from kernel No encryption on...

loldrivers-client

LOLDrivers-client The OG, blazingly fast , zero dependencies client for LOLDrivers by MagicSword. Scan your Windows computer for known vulnerable or malicious drivers. Installation Command Line Copy and paste the command below into a PowerShell terminal. This does not require an elevated...

Blackout

Blackout leveraging gmer driver to effectively disabling or killing EDRs and AVs. it bypass HVCI fluently the sample is sourced from loldrivers https://www.loldrivers.io/drivers/7ce8fb06-46eb-4f4f-90d5-5518a6561f15/ usage Place the driver Blackout.sys in the same path as the executable The...