80488 matches found
DriverBuddyReloaded
Driver Buddy Reloaded Table of Contents Driver Buddy Reloaded Table of Contents Installation Quick Usage Advanced Usage About Driver Buddy Reloaded Finding DispatchDeviceControl Labelling WDM and WDF Structures Finding and Decoding IOCTL Codes Flagging Functions Finding DeviceName Dumping Pooltag...
mimikatz-detector-busylight
Controlador detector de Mimikatz - Busylight Emulación de controlador USB HID con PID/VID 0x3bca/0x27bb de Plenom A/S Busylight Alpha, compatible con Mimikatz. Cuando se ejecuta mimikatz, de forma predeterminada se crea un subproceso que intenta localizar uno de los busylights compatibles. Se...
antispy
AntiSpy Inglés | 简体中文 Un potente conjunto de herramientas anti rootkit AntiSpy es un conjunto de herramientas antivirus y anti rootkits gratuito pero potente. Te ofrece la capacidad con los privilegios más altos de detectar, analizar y restaurar diversas modificaciones y hooks del kernel. Con su...
AgentSmith-HIDS
AgentSmith-HIDS --The name of this project was inspired by the movie - The Matrix English | 简体中文 THIS REPO IS OLD RELEASE VERSION: https://github.com/bytedance/Elkeid About AgentSmith-HIDS Technically, AgentSmith-HIDS is not a Host-based Intrusion Detection System HIDS due to lack of rule engine...
ft9201-libfprint
ft9201-libfprint Linux fingerprint support for the Focal-systems FT9201 USB reader 2808:93a9, sold as a standalone Windows Hello dongle, as a libfprint driver. The sensor is a tiny 96×96 optical reader. libfprint's built-in matcher does a poor job on an image that small, so this driver instead...
GhostKatz
GhostKatz Extract LSASS credentials directly from physical memory by abusing signed vulnerable drivers with physical memory read primitives via MmMapIoSpace, bypassing traditional user-mode detection capabilities. This tool was developed in collaboration between Julian Peña and Eric Esquivel. Thi...
CVE-2025-3464-AsIO3-LPE
CVE-2025-3464-AsIO3-LPE CVE-2025-3464: Exploit de escalación local sin privilegios para AsIO3.sys de ASUS - Bypass de autenticación TOCTOU + Decremento de PreviousMode CVE-2025-3464: Escalación de Privilegios Local en AsIO3.sys Este exploit solo funciona en Windows 11 22H2 o anterior. Microsoft...
CVE-2024-21338-Exploit
CVE-2024-21338 Exploit Project Introduction This is a POC for CVE-2024-21338, a privilege escalation vulnerability in the Windows AppLocker driver appid.sys. It was exploited as a 0-day by the Lazarus group for local privilege escalation on Windows. Vulnerability Background CVE-2024-21338 is a...
CVE-2026-21007-GPU-Driver-ioctl-Race-Condition-Kernel-Memory-Mapping-
CVE-2026-21007 – Condición de carrera en el ioctl del controlador de GPU Mapeo de memoria del kernel Código del programa simulación en C // gpudriversim.c - Simulated GPU driver ioctl with race condition include include include include void gpummap = NULL; sizet mapsize = 0; int locked = 0; void...
EfiGuard
Overview EfiGuard is a portable x64 UEFI bootkit that patches the Windows boot manager, boot loader and kernel at boot time in order to disable PatchGuard and Driver Signature Enforcement DSE. If you're just looking to try EfiGuard, skip to Usage. Features Currently supports all EFI-compatible...
kemon
Kemon An Open Source Pre and Post Callback-based Framework for macOS Kernel Monitoring. Breaking News - 08/28/2019 macOS Catalina 10.15 Beta 7 Release Notes https://developer.apple.com/documentation/macosreleasenotes/macoscatalina1015beta7releasenotes Endpoint Security The kauth API has been...
CVE-2015-0057
CVE-2015-0057 Explotación en sistemas de 32 y 64 bits Autor: Aaron Adams Traducción: 55-AA Nota del traductor: Algunas partes de este artículo se han traducido libremente; consulte el original si tiene dudas. Terminología: Primitiva de operación: Similar a una función, es un conjunto de operacion...
WinDriver-EXP
Repositorio de PoC para controladores de Windows vulnerables Este repositorio incluye exploits PoC para vulnerabilidades en controladores de Windows, que muestran fallos que pueden resultar en escalada de privilegios, ejecución de código arbitrario u otros riesgos de seguridad. Destinado únicamen...
CVE-2021-43224-POC
CVE-2021-43224-POC Controlador del sistema de archivos de registro común de Windows POC quizás CVE-2021-43226 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-43226 solo BSOD !!! probado en windows 20H2 ver 19042.1387...
CVE-2020-36603
CVE-2020-36603 El controlador anti-trampas mhyprot2.sys 1.0.0.0 de HoYoVerse anteriormente miHoYo para Genshin Impact no restringe adecuadamente las llamadas a funciones no privilegiadas, lo que permite a los usuarios locales sin privilegios ejecutar código arbitrario con privilegios de SYSTEM en...
hidden
Hidden 🇺🇦 Hidden has been developed like a solution for reverse engineering and researching tasks. This is a windows driver with a usermode interface which is used for hiding specific environment on your windows machine, like installed RCE programs ex. procmon, wireshark, vm infrastructure ex...
letsdefend-cve-2024-49138-investigation
Investigación LetsDefend: CVE-2024-49138 🔍 Descripción general Investigación práctica de SOC y simulación de respuesta a incidentes utilizando LetsDefend, centrada en la explotación real de CVE-2024-49138 , una vulnerabilidad de escalada de privilegios en el controlador CLFS de Windows. 📅 Detalle...
CVE-2026-6383 vulnerabilities
Vulnerabilities for packages: docker-machine-driver-harvester...