NimicStack

NimicStack NimicStack 是使用纯 Nim 实现的调用栈欺骗（Call Stack Spoofing）技术，用于模仿合法程序。整个项目基于 WithSecure Labs 分享的 PoC 编译 你可以使用以下命令直接编译源代码： nim c -d=mingw --app=console --cpu=amd64 -o:NimicStack.exe .\Main.nim 如果遇到 "cannot open file" 错误，你还需要安装所需的依赖： nimble install ptrmath winim 用法 与参考项目一样，NimicStack 可以在打开 LSASS...

CVE-2025-14963

A vulnerability identified in the HX Agent driver file fekern.sys allowed a threat actor with local user access the ability to gain elevated system privileges. Utilization of a Bring Your Own Vulnerable Driver BYOVD was leveraged to gain access to the critical Windows process memory lsass.exe Loc...