eop24-26229

Firebeam CVE-2024-26229 plugin A small firebeam kaine's risc-v vm plugin to exploit the CVE-2024-26229 vulnerability that utilizes a vulnerable IOCTL in csc.sys. The vulnerability is used to get kernel R/W memory access to corrupt the KTHREAD-PreviousMode and then to leveraging DKOM to achieve LP...

DIBF

DIBF Windows Driver IOCTL Tool Suite. DIBF Dynamic Ioctl Brute-Forcer and fuzzers This tool encompasses two distinct features. It guesses the IOCTL values that the driver accepts and also their valid size limitations and store the results are in a file for future reuse. The second feature is...

DriverBuddy

Quickstart DriverBuddy Installation Instructions 1. Copy DriverBuddy folder and DriverBuddy.py file into the IDA plugins folder C:\Program Files x86\IDA 6.8\plugins or wherever you installed IDA DriverBuddy Usage Instructions 1. Start IDA and open a Windows kernel driver 2. Go to Edit-Plugins and...

WindowsFirewallHookDriverEnumeration

Перечисление драйверов перехвата брандмауэра Windows Инструменты для перечисления драйверов перехвата брандмауэра Windows на Windows 2000, XP и 2003. Мы встречали образец вредоносного кода, в котором используется этот приём. Техника перехвата Функциональность перехвата брандмауэра Windows в Windo...

KillChain

KillChain ?? Отказ от ответственности: Этот проект предназначен строго для образовательных целей и исследований в области безопасности. Автор не несёт ответственности за любое неправомерное использование, ущерб или незаконную деятельность, вызванную этим инструментом. Используйте только в...

IOBitUnlockerUnlocker

Введение 0 day Перемещает или копирует любой файл. Обходит предыдущий патч с помощью трюка с контрольной суммой. Статья: https://nathan2.com/files/iobit.pdf Общая информация: https://nathan2.com/posts/iobit/ Я обнаружил это, не зная, что ранее уже существовал другой эксплойт, который нашёл это...

CVE-2025-24990_POC

Драйвер модема Agere для Windows ltmdm64.sys. Этот драйвер очень старый и не загружается по умолчанию на моей тестовой машине, поэтому я буду эксплуатировать его в сценарии BYOVD. Интересно, что, согласно моим исследованиям, этот драйвер существовал на Windows 7 и имеет как минимум одну ошибку...

CVE-2025-60349

CVE-2025-60349: Pxscan Arbitrary Process Termination An issue was discovered in Prevx v3.0.5.220 allowing attackers to cause a denial of service via sending IOCTL code 0x22E044 to the pxscan.sys driver. Any processes listed under registry key...

CVE-2026-21986-VirtualBox-DoS

CVE-2026-21986 - VirtualBox Shared Folders Kernel Memory Exhaustion DoS Overview This repository contains a proof of concept and technical write-up for CVE-2026-21986, a denial-of-service vulnerability in Oracle VM VirtualBox. The issue exists in the Shared Folders driver interface and allows...

iqvw64e-privilege-escalation

iqvw64e-privilege-escalation CVE-2015-2291 Local Privilege Escalation PoC Overview This project is an educational proof-of-concept for a Local Privilege Escalation LPE vulnerability in the driver iqvw64e.sys SHA256: 37c637a74bf20d7630281581a8fae124200920df11ad7cd68c14c26cc12c5ec9 — the Intel...

CVE-2025-7771

CVE-2025-7771 — произвольное чтение/запись физической памяти через ThrottleStop.sys Полноценный proof-of-concept для драйвера TechPowerUp ThrottleStop.sys CVE-2025-7771. Подписанный, всё ещё загружаемый драйвер ядра предоставляет непроверенное чтение и запись физической памяти через два IOCTL. Эт...

CVE-2025-65264

CVE-2025-65264 Description In CPU‑Z 2.17 and earlier and other products that use CPU-Z driver with version 1.0.6.1 and earlier, the driver e.g. cpuz161.sys dereferenced a value from a user‑supplied address and wrote it to the system buffer supplied by the caller. An attacker could read arbitrary...

CVE-2020-0069_poc

Description This repository contains the materials we used to investigate CVE-2020-0069 on a Xiaomi Redmi 6a with a Mediatek SoC MT6762M. There are three programs: kernelrw.c a C program allowing to read/write kernel memory poc.sh a shell script syscallhook.c a C library that can be used to trace...

CVE-2026-47517

A flaw was found in nvidia-driver. A local user can submit a specially crafted input/output control ioctl request to the kernel-mode driver, triggering a null pointer dereference. Successful exploitation can crash the system, resulting in a Denial of Service DoS. Mitigation Prevent the NVIDIA...

CVE-2026-47561

A flaw was found in the NVIDIA GPU display driver. A local, unprivileged user can exploit this vulnerability by submitting an input/output control ioctl request with an unvalidated buffer size to the driver's kernel layer. This causes an out-of-bounds write in kernel memory, which may allow the...

CVE-2026-47517

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode driver where a local user may cause a null pointer dereference by submitting a crafted ioctl. A successful exploit of this vulnerability might lead to denial of service...

CVE-2026-47517

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode driver where a local user may cause a null pointer dereference by submitting a crafted ioctl. A successful exploit of this vulnerability might lead to denial of service...

EUVD-2026-90170

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode driver where a local user may cause a null pointer dereference by submitting a crafted ioctl. A successful exploit of this vulnerability might lead to denial of service...

CVE-2026-47517

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode driver where a local user may cause a null pointer dereference by submitting a crafted ioctl. A successful exploit of this vulnerability might lead to denial of service...

CVE-2026-47517

The NVIDIA GPU Display Driver for Linux contains a vulnerability in its kernel mode driver . A local user can trigger a null pointer dereference by submitting a crafted ioctl . Successful exploitation of this flaw may result in a denial of service . No specific exploit details or remediation step...