Chaos-Rootkit

Chaos-Rootkit Chaos-Rootkit is an x64 Ring 0 rootkit i wrote to better understand kernel internals and rootkit techniques. Gui version Features Hide process: This feature allows you to hide processes from listing tools via DKOM. Elevate specific process privileges : This feature enables you to...

page-table-exploitation

page-table-exploitation A demonstration of how page tables can be used to run arbitrary code in ring-0 and lead to a privesc. Uses CVE-2016-7255 as an example...

uefi-pxe-cve-2026-97631

uefi-pxe-cve-2026-97631 — headless harness for the EDK II PXE ICMP overflow ⚠️ LOCAL LAB ONLY. These tools drive a local QEMU VM against a firmware you control. Never point the ICMP generator at hardware or networks you don't own. CVE-2026-97631: a 16-year-old buffer overflow in TianoCore EDK II...

OshoosiClaw

🏹 OpenỌ̀ṣọ́ọ̀sì — OshoosiClaw The Decentralized Immune System for the Modern Endpoint -success?style=for-the-badge&logo=githubactions -blueviolet?style=for-the-badge&logo=checkmarx !OshoosiCla...

RLSA-2026:97521 Important: microcode_ctl security, bug fix, and enhancement update

The microcodectl packages provide microcode updates for Intel and AMD processors. Security Fixes: kernel: hypervisor: Intel Processors: Privilege escalation in Ring 0 via improper value handling CVE-2025-35973 Bug Fixes and Enhancements: Rocky Linux 9 Update Intel CPU microcode to the latest...

microcode_ctl security, bug fix, and enhancement update

An update is available for microcodectl. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The microcodectl packages provide microcode updates for Intel and AMD...

oni-framework

Oni-Framework Oni framework is a platform for embedded device software development. It is used in order to remotely debug/add functionality to an embedded device. As of right now, the main concepts are a fully modular plugin system, with local and remote rpc. This was designed to run at ring-0...

MSRMapper

MSRMapper BYOVD Manual Mapper for Windows x64 · CVE-2025-8061 Overview MSRMapper is a manual kernel driver mapper for Windows x64 that abuses CVE-2025-8061 in the vulnerable Lenovo driver LnvMSRIO.sys to perform a BYOVD Bring Your Own Vulnerable Driver attack. The project maps a PE64 driver...

Cronos-Rootkit

Cronos Rootkit Cronos is Windows 10/11 x64 ring 0 rootkit. Cronos is able to hide processes, protect and elevate them with token manipulation. Features Hide process Elevate process permissions Protect process Contributions Contributions are welcome...

CVE-2026-63027

Incorrect behavior order in the gettcblevelbysvn for the IntelR TDX Migration Trust Domain MigTD within Ring 0: Hypervisor may allow a denial of service. Network adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially...

CVE-2026-62920

Unchecked return value in the MigTD error handling for the IntelR TDX Migration Trust Domain MigTD within Ring 0: Hypervisor may allow a denial of service. System software adversary with a privileged user combined with a low complexity attack may enable denial of service. This result may...

CVE-2026-62930

Unchecked return value in the MigTD's TLS implementation for the IntelR TDX Migration Trust Domain MigTD within Ring 0: Hypervisor may allow a denial of service. Network adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may...

CVE-2026-61467

Use after free in the MigTD virtio driver for the IntelR TDX Migration Trust Domain MigTD within Ring 0: Hypervisor may allow an escalation of privilege. System software adversary with a privileged user combined with a low complexity attack may enable data corruption. This result may potentially...

CVE-2026-61468

Improper privilege management in the MigTD logging for the IntelR TDX Migration Trust Domain MigTD within Ring 0: Hypervisor may allow an information disclosure. System software adversary with a privileged user combined with a low complexity attack may enable data exposure. This result may...

CVE-2026-61470

Improper control of a resource through its lifetime in the MigTD's TLS client for the IntelR TDX Migration Trust Domain MigTD within Ring 0: Hypervisor may allow a denial of service. Network adversary with an unauthenticated user combined with a low complexity attack may enable data corruption...

CVE-2026-61887

Missing critical step in authentication in the MigTD SPDM rebind implementation for the IntelR TDX Migration Trust Domain MigTD within Ring 0: Hypervisor may allow an escalation of privilege and information disclosure. Network adversary with an unauthenticated user combined with a low complexity...

CVE-2026-60139

Improper neutralization in the MigTD SPDM transport for the IntelR TDX Migration Trust Domain MigTD within Ring 0: Hypervisor may allow a denial of service. Network adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potential...

CVE-2026-61377

Sensitive information uncleared in resource before release for reuse in the MigTD for the IntelR TDX Migration Trust Domain MigTD within Ring 0: Hypervisor may allow an information disclosure. System software adversary with a privileged user combined with a high complexity attack may enable data...

CVE-2026-61383

Incorrect calculation of buffer size in the MigTD's servtdgetquote for the IntelR TDX Migration Trust Domain MigTD within Ring 0: Hypervisor may allow a denial of service. System software adversary with an unauthenticated user combined with a high complexity attack may enable denial of service...

CVE-2026-60142

Write-what-where condition in the MigTD for the IntelR TDX Migration Trust Domain MigTD within Ring 0: Hypervisor may allow an information disclosure and escalation of privilege. System software adversary with a privileged user combined with a low complexity attack may enable escalation of...