CVE-2020-15368-AsrDrv103-research

CVE-2020-15368 — AsrDrv103.sys 本仓库包含与 CVE-2020-15368 相关的 ASRock AsrDrv103.sys Windows 内核驱动程序逆向工程材料。 该项目是作为 Windows 内核驱动程序、驱动通信接口、底层硬件访问以及易受攻击驱动设计的实践研究而创建的。 我不是 CVE-2020-15368 的原始发现者。本仓库的目标是记录我自己对该驱动程序的分析和理解。 分析报告 完整分析报告可在 reports 目录中找到： 俄语版本 英语版本 样本 AsrDrv103 SHA-256...

asrockploit

利用 CVE-2020-15368 实现任意代码执行...

APT Cyber Tools Targeting ICS/SCADA Devices

Summary Actions to Take Today to Protect ICS/SCADA Devices: • Enforce multifactor authentication for all remote access to ICS networks and devices whenever possible. • Change all passwords to ICS/SCADA devices and systems on a consistent schedule, especially all default passwords, to device-uniqu...

Feds: APTs Have Tools That Can Take Over Critical Infrastructure

Threat actors have built and are ready to deploy tools that can take over a number of widely used industrial control system ICS devices, which spells trouble for critical infrastructure providers—particularly those in the energy sector, federal agencies have warned. In a joint advisory, the...

CVE-2020-15368

creationtimestamp| type| source ---|---|--- 2021-06-30 07:03:28+00:00| published-proof-of-concept| https://t.me/orderofsixangles/1482 2021-07-01 11:03:01+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/3736 2021-07-30 07:56:22+00:00| published-proof-of-concept|...

Exploit for CVE-2020-15368

How to exploit a vulnerable windows driver Exploit and Proof...

CVE-2020-15368

AsrDrv103.sys in the ASRock RGB Driver does not properly restrict access from user space, as demonstrated by triggering a triple fault via a request to zero CR3...

CVE-2020-15368

AsrDrv103.sys in the ASRock RGB Driver does not properly restrict access from user space, as demonstrated by triggering a triple fault via a request to zero CR3...

CVE-2020-15368

CVE-2020-15368 involves ASRock RGB Driver’s AsrDrv103.sys, which fails to restrict user-space access. The Red Hat advisory and other sources confirm the issue can be triggered via a crafted request to CR3, enabling kernel-level code execution (e.g., triple fault scenario) and potential post-explo...