HydraDragonAntivirus

Hydra Dragon アンチウイルス 警告: ここにあるドキュメントはかなり古いですが、参考のために残しています。 OpenEDR、MBRFilter、Sanctum などを除き、各ディレクトリはパフォーマンスのために完全に非推奨です。 📚 詳細なドキュメント、アーキテクチャ図、コンポーネントガイドについては、プロジェクト Wiki をご覧ください。 🎥 POC: https://www.youtube.com/watch?v=2ZxJmZ3XTEM&t 警告: 活発な開発が進行中 このプロジェクトは本番環境に対応していません。...

threat-dragon

OWASP Threat Dragon OWASP Threat Dragon は、無料でオープンソースのクロスプラットフォームな脅威モデリングアプリケーションです。 脅威モデリングの図を作成し、図の要素に対する脅威を列挙するために使用されます。 Mike Goodwin は、脅威をモデリングするための直感的でアクセスしやすい方法を提供するオープンソースコミュニティプロジェクトとして Threat Dragon を創設しました。 Threat Dragon は、柔軟性とシンプルさを重視し、さまざまなタイプのチームが利用しやすいように設計されています。 このプロジェクトは OWASP...

owasp-threat-dragon-desktop

OWASP Threat Dragon Threat Dragon은 무료 오픈 소스 크로스 플랫폼 위협 모델링 애플리케이션으로, 시스템 다이어그램 작성과 위협/대응을 자동 생성하는 규칙 엔진을 포함합니다. 이는 OWASP Incubator Project입니다. 이 프로젝트는 뛰어난 사용자 경험, 강력한 규칙 엔진, 그리고 다른 개발 수명 주기 도구와의 통합에 중점을 둡니다. OWASP에서 위협 모델링 및 위험 평가에 대한 좋은 개요를 제공하며, Threat Dragon이 달성할 목표는 다음과 같습니다: 데이터 흐름 다이어그램 설계 ...

owasp-threat-dragon-desktop

OWASP Threat Dragon Threat Dragon is a free, open-source, cross-platform threat modeling application including system diagramming and a rule engine to auto-generate threats/mitigations. It is an OWASP Incubator Project. The focus of the project is on great UX, a powerful rule engine and integrati...

CVE-2021-27965

CVE-2021-27965 MSI Dragon Center 2.0.98.0 より前のバージョンにおける MsIo64.sys ドライバ 1.1.19.1016 より前のバージョンには、バッファオーバーフローが存在し、細工された 0x80102040、0x80102044、0x80102050、または 0x80102054 IOCTL リクエストを介して権限昇格が可能です。 このエクスプロイトは必ず完成されます、それが保証です。...

dragondance

Dragon Dance 무엇인가요? Dragon Dance는 Ghidra 플러그인으로, 바이너리 코드 커버리지 데이터를 시각화하고 조작할 수 있게 해줍니다. 여러 커버리지 소스에서 커버리지 데이터를 가져올 수 있습니다. 현재 플러그인은 Dynamorio와 Intel Pin 바이너리 계측 도구를 지원합니다. Dynamorio는 "drcov"라는 자체 커버리지 수집 모듈을 가지고 있습니다. Intel Pin은 내장 커버리지 수집 모듈을 제공하지 않습니다. 이 부재 상황을 처리하기 위해 Intel Pin용 자체 커버리지 수집 모듈을...

CVE-2021-29337

CVE-2021-29337 - MODAPI.sys MSI Dragon Center における権限昇格 概要 影響を受ける製品: MSI Dragon Center 影響を受けるバージョン: 2.0.104.0 CVE MITRE 説明 ドラゴンセンターの脆弱なカーネルドライバ MODAPI.sys は IOCTL 0x9C406104 を公開しており、低権限ユーザーが物理メモリを仮想アドレス空間にマッピングする複数のドライバルーチン MmMapIoSpace の 1 つを呼び出すことで、物理メモリと直接やり取りできるようにします。 DeviceIoControl...

POC-CVE-2024-12227

CVE-2024-12227 - NTIOLibX64.sys DoS PoC MSI Dragon Center 的 NTIOLibX64.sys 驱动程序中 CVE-2024-12227（空指针解引用漏洞）的概念验证。 描述 NTIOLibX64.sys 版本 3.0.0.10 在 ReadPhysicalMemory 函数（IOCTL 0xC3506104）中存在空指针解引用漏洞。该驱动在调用 MmUnmapIoSpace 之前未检查 MmMapIoSpace 的返回值。如果 MmMapIoSpace 返回 NULL，则使用 NULL 指针调用 MmUnmapIoSpace...

LolModapi

ハッカーの皆さん、こんにちは。 これはMSI Dragon Center 2.0.155.0がインストールするカーネルドライバー、MODAPI.sys内の認証不要のMSR書き込みです。このドライバーは、任意のローカルユーザーが管理者権限やUACなしで開けるセキュリティ記述子を持つデバイスオブジェクトを公開しています。ハンドルを取得してしまえば、MSRインデックスにホワイトリストはないため、好きなMSRを読み書きできます。 読み取り側だけでもKASLRを破壊できます。IA32LSTAR 0xC0000082...

HydraDragonAntivirus openedr-v2-release-portable-9

Hydra Dragon Antivirus WARNING: Highly outdated documenation here but for reference I keep it. Other than OpenEDR, MBRFilter, Sanctum etc. directories are fully deperecated for performance. 📚 For detailed documentation, architecture diagrams, and component guides, visit our Project Wiki. 🎥 POC:...

HydraDragonAntivirus openedr-v2-release-9

Hydra Dragon Antivirus WARNING: Highly outdated documenation here but for reference I keep it. Other than OpenEDR, MBRFilter, Sanctum etc. directories are fully deperecated for performance. 📚 For detailed documentation, architecture diagrams, and component guides, visit our Project Wiki. 🎥 POC:...

CVE-2026-82908

A vulnerability was found in MSI Dragon Center up to 2.0.155.0. Affected by this vulnerability is the function MmioWritePath in the library NTIOLibX64.sys of the component MMIO Write Path Handler. Performing a manipulation of the argument count/elementSize results in integer overflow. The attack...

EUVD-2026-68766

A vulnerability was found in MSI Dragon Center up to 2.0.155.0. Affected by this vulnerability is the function MmioWritePath in the library NTIOLibX64.sys of the component MMIO Write Path Handler. Performing a manipulation of the argument count/elementSize results in integer overflow. The attack...

CVE-2026-82908 MSI Dragon Center MMIO Write Path NTIOLib_X64.sys MmioWritePath integer overflow

A vulnerability was found in MSI Dragon Center up to 2.0.155.0. Affected by this vulnerability is the function MmioWritePath in the library NTIOLibX64.sys of the component MMIO Write Path Handler. Performing a manipulation of the argument count/elementSize results in integer overflow. The attack...

CVE-2026-82908

MSI Dragon Center up to version 2.0.155.0 contains an integer overflow in the function MmioWritePath within the driver NTIOLib_X64.sys (component: MMIO Write Path Handler). The overflow is triggered by manipulating the argument count or elementSize parameters. Exploitation requires a local attack...

CVE-2026-82908 MSI Dragon Center MMIO Write Path NTIOLib_X64.sys MmioWritePath integer overflow

A vulnerability was found in MSI Dragon Center up to 2.0.155.0. Affected by this vulnerability is the function MmioWritePath in the library NTIOLibX64.sys of the component MMIO Write Path Handler. Performing a manipulation of the argument count/elementSize results in integer overflow. The attack...

CVE-2026-82908: Integer Overflow or Wraparound

A vulnerability was found in MSI Dragon Center up to 2.0.155.0. Affected by this vulnerability is the function MmioWritePath in the library NTIOLibX64.sys of the component MMIO Write Path Handler. Performing a manipulation of the argument count/elementSize results in integer overflow. The attack...

PT-2026-83984

A vulnerability was found in MSI Dragon Center up to 2.0.155.0. Affected by this vulnerability is the function MmioWritePath in the library NTIOLib X64.sys of the component MMIO Write Path Handler. Performing a manipulation of the argument count/elementSize results in integer overflow. The attack...

CVE-2016-20090

Comodo Dragon Browser versions up to 52.15.25.663 contain a privilege escalation vulnerability in the DragonUpdater service due to an unquoted service path running with SYSTEM privileges. A local attacker can insert a malicious executable in the service path and execute arbitrary code with elevat...

CVE-2016-20090

Comodo Dragon Browser versions up to 52.15.25.663 contain a privilege escalation vulnerability in the DragonUpdater service due to an unquoted service path running with SYSTEM privileges. A local attacker can insert a malicious executable in the service path and execute arbitrary code with elevat...