KnockGiga

hi hackers. gdrv3.sys is the signed kernel driver that ships with Gigabyte App Center and EasyTune. It creates \.\GIOV3 with no security descriptor, so any local user can open it no admin, no UAC. Two of its IOCTLs are the whole story. The first one 0xC3502019 says it reads physical memory. You...