pfsense-vlan-parent-ioctl

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · pfsense-vlan-parent-ioctl pfsense-vlan-parent-ioctl Class: ioctl leftover Reach: Remote pfSense CE 2.9.0-DEVELOPMENT 9363ac5 - pfsense.org interfacesvlanedit.php builds $portlist for FormSelect only. Save checks...

CVE-2022-3699

CVE-2022-3699 Incorrect access control for the Lenovo Diagnostics Driver allows a low-privileged user the ability to issue device IOCTLs to perform arbitrary physical/virtual memory read/write. Thank you to ch3rn0byl for helping with this and I totally 100% ripped two of his functions. Explanatio...

CVE-2015-2291

CVE-2015-2291 1 IQVW32.sys before 1.3.1.0 and 2 IQVW64.sys before 1.3.1.0 in the Intel Ethernet diagnostics driver for Windows allows local users to cause a denial of service or possibly execute arbitrary code with kernel privileges via a crafted a 0x80862013, b 0x8086200B, c 0x8086200F, or d...

Terminator

Terminator Reproducing Spyboy technique, which involves terminating all EDR/XDR/AVs processes by abusing the zam64.sys driver Spyboy was selling the Terminator software at a price of $3,000 for more detail the sample is sourced from loldrivers usage the compiled version can be found HERE Place th...

CVE-2024-1642470

Windows USB Generic Parent Driver Remote Code Execution Vulnerability CVE-2024-1642470 Overview This repository contains a proof-of-concept PoC exploit code and a detection script for the Windows USB Generic Parent Driver Remote Code Execution Vulnerability, identified as CVE-2024-1642470...

Lenovo-CVE-2025-8061

CVE-2025-8061 is a privilege escalation vulnerability in Lenovo's LnvMSRIO.sys driver. The driver exposes IOCTL handlers that allow any user-mode process including unprivileged users to: Read/write arbitrary Model-Specific Registers MSRs Read/write arbitrary physical memory This gives a standard...

SecDrvPoolLeak

SecDrvPoolLeak - A PoC for CVE-2018-7250 Description An issue was discovered in secdrv.sys as shipped in Microsoft Windows Vista, Windows 7, Windows 8, and Windows 8.1 before KB3086255, and as shipped in Macrovision SafeDisc. An uninitialized kernel pool allocation in IOCTL 0xCA002813 allows a...

WiseDelete

WiseDelfile Driver Wrapper A lightweight Windows utility that loads the WiseDelfile64.sys kernel driver, performs the required device handshake, and issues IOCTL requests to delete files that cannot be removed through standard Windows APIs. This project demonstrates how CVE-2025-66680 , can be us...

cve-2025-7771

CVE-2025-7771 — ThrottleStop.sys LPE Proof-of-concept for CVE-2025-7771. ThrottleStop.sys exposes two IOCTL handlers that allow arbitrary physical memory read/write with no access control — any admin process can read or write anywhere in physical RAM. Tested on Windows 10 22H2 and Windows 11 23H2...

CVE-2023-2002

Linux Bluetooth: Unauthorized management command execution CVE-2023-2002 An insufficient permission check has been found in the Bluetooth subsystem of the Linux kernel when handling ioctl system calls of HCI sockets. This causes tasks without the proper CAPNETADMIN capability can easily mark HCI...

SIOCtl

SIOCtl Simple IOCTL dispatcher This is a generic IOCTL "dispatcher". I made this to be used as a POC for CVE 2018-8060 and 2018-8061, but it can be used to any device, IOCTL and data, thought. Input data is a binary file, containing raw data to be used as input buffer in IO control. Output data i...

TopazTerminator

TopazTerminator F, Another driver got burned.. I was gatekeeping wsftprm.sys driver for a while ; but since someone posted a public POC, I'm ungatekeeping it. We all know it'll get added to the driver blocklist soon, so here's my implementation for the same — in C This project exploits the...

CVE-2025-1055-poc

CVE-2025-1055-poc PoC for CVE-2025-1055 and CVE-2025-52915 using K7RKScan.sys. This PoC use the 0x222018 IOCTL to terminate arbitrary processes. Usage Installing driver: sc.exe create K7RKScan1516.sys binPath=C:\Users\Administrator\Downloads\K7RKScan1516.sys type=kernel && sc.exe start...

cve-2026-0828

CVE-2026-0828 — Safetica ProcessMonitorDriver.sys BYOVD PoC Safetica DLP kernel driver ProcessMonitorDriver.sys exposes an unauthenticated IOCTL that allows any user-mode caller to terminate arbitrary processes via ZwTerminateProcess in kernel context, bypassing PPL Protected Process Light...

DIBF

DIBF Windows Driver IOCTL Tool Suite. DIBF Dynamic Ioctl Brute-Forcer and fuzzers This tool encompasses two distinct features. It guesses the IOCTL values that the driver accepts and also their valid size limitations and store the results are in a file for future reuse. The second feature is...

cormem-read-poc

DISCLAIMER : This project is for educational and security research purposes only. Use only on systems you own or have explicit permission to test. Unauthorized use may be illegal in your jurisdiction. cordrvexploit — CVE-2026-38194 Vulnerability This tool demonstrates CVE-2026-38194, a...

CVE-2025-67246

CVE-2025-67246 Vulnerability Title :LuDaShi Incorrect Access Control Affected versions :Less than 6.1026.4505.112 Discovery time :December 2, 2025 Discoverer :ZhouRui Analysis Report : LuDaShi is a well-known free system utility software that provides free hardware authentication, computer mobile...

CVE-2024-21338-Exploit

CVE-2024-21338 Exploit Project Introduction This is a POC for CVE-2024-21338, a privilege escalation vulnerability in the Windows AppLocker driver appid.sys. It was exploited as a 0-day by the Lazarus group for local privilege escalation on Windows. Vulnerability Background CVE-2024-21338 is a...

throttlestop-exploit-rw

Physical Memory Mapper Research tool demonstrating physical memory access through virtual-to-physical address translation combined with vulnerable driver exploitation. Overview This project explores low-level Windows memory management by combining the superfetch technique for address translation...

CVE-2025-60349

CVE-2025-60349: Pxscan Arbitrary Process Termination An issue was discovered in Prevx v3.0.5.220 allowing attackers to cause a denial of service via sending IOCTL code 0x22E044 to the pxscan.sys driver. Any processes listed under registry key...