Driver-SoulExtraction

SoulExtraction SoulExtraction is a windows driver library for extracting cert information in windows drivers Compile Visual Studio 2022 & WDK10 llvm-msvc link Credit linux BackEngineerLab https://git.back.engineering/gmh5225/Driver-SoulExtraction Some discussions on UnknownCheats...

armadito-windows-driver

Armadito Windows Driver El Armadito Windows Driver es el responsable de la protección en acceso del antivirus Armadito. Copyright C Teclib', 2015, 2016 Página del proyecto : http://www.teclib-edition.com/teclib-products/armadito-antivirus Consulte la documentación en línea en :...

CVE-2021-21551

CVE-2021-21551 PoC simple para explotar CVE-2021-21551 para LPE ejecutando cmd del sistema. https://vulners.com/cve/CVE-2021-21551 Se descubrió un problema en el controlador firmado de Dell para Windows dbutil23.sys que puede llevar al compromiso de todo el sistema local. La rutina de despacho de...

DIBF

DIBF Suite de herramientas IOCTL para controladores de Windows. DIBF Brute-Forcer dinámico de IOCTL y fuzzers Esta herramienta abarca dos funcionalidades distintas. Adivina los valores IOCTL que acepta el controlador y también sus limitaciones de tamaño válidas, y guarda los resultados en un...

CVE-2025-7771

Una aplicación de exploit escrita en Rust para CVE-2025-7771 Un vistazo al código fuente data.rs, almacena el binario del controlador vulnerable como un arreglo estático exploit.rs, implementa primitivas de lectura/escritura arbitrarias basadas en ese controlador vulnerable filemap.rs, un...

CVE-2025-0288

CVE-2025-0287 Este repositorio contiene una captura de pantalla de la función vulnerable identificada durante la ingeniería inversa de un controlador de Windows vulnerable. Descripción biontdrv.sysVul: versión vulnerable biontdrv.sysSecure: versión parcheada POCCVE-2025-0288.c: código de prueba d...

CVE-2025-62470

This is not exploiting, just POC BUGCHECKCODE: 50 BUGCHECKP1: ffffc101f6bf91be BUGCHECKP2: 0 BUGCHECKP3: fffff8007e194409 BUGCHECKP4: 0 READADDRESS: ffffc101f6bf91be MMINTERNALCODE: 0 IMAGENAME: CLFS.SYS MODULENAME: CLFS FAULTINGMODULE: fffff8007e190000 CLFS PROCESSNAME: ConsoleApplication4.exe...

Exploit for Improper Privilege Management in Echo Anti_Cheat_Tool

!image-removebg-preview1https://github.com/kite03/echoac-poc/...

PT-2026-89122

A vulnerability in the Thesycon DPC Latency Checker driver dpc.sys thru 1.4.0 allows local unprivileged users to cause a denial-of-service BSOD condition on Windows systems. The driver exposes an IOCTL interface 0x81772008 that accepts user-controlled input without validating pointers before...

CVE-2026-81355

Heap-based buffer overflow in Virtual Hard Disk VHD Miniport Driver allows an authorized attacker to execute code locally...

CVE-2026-70585

Use after free in Windows Services for NFS ONCRPC XDR Driver allows an authorized attacker to execute code locally...

CVE-2026-69859

Time-of-check time-of-use toctou race condition in Windows USB Audio Class driver usbaudio.sys allows an authorized attacker to elevate privileges locally...

CVE-2026-69770

Use of uninitialized resource in Windows Spaceport.sys allows an authorized attacker to disclose information locally...

CVE-2026-69611

Use after free in Virtual Hard Disk VHD Miniport Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-69492

Heap-based buffer overflow in Windows Partition Management Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-69468

Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-69270

Heap-based buffer overflow in Windows USB Audio Class driver usbaudio.sys allows an authorized attacker to elevate privileges locally...

EUVD-2026-73697

Heap-based buffer overflow in Windows VOLSNAP.SYS allows an authorized attacker to execute code locally...

CVE-2026-71349

CVE-2026-71349 is a heap-based buffer overflow in the Windows Spaceport.sys driver that allows an unauthorized attacker to execute code via a physical attack. The vulnerability requires no privileges or user interaction, with low attack complexity, but demands physical access to the target system...

CVE-2026-69895

This information disclosure vulnerability exists in the Windows Spaceport.sys kernel driver, caused by an out-of-bounds read . A local, authorized attacker with low privileges can exploit it to disclose information , with no impact on integrity or availability. The CVSS 3.1 score is 4.7 (Medium) ...