MSRMapper

MSRMapper 适用于 Windows x64 的 BYOVD 手动映射器 · CVE-2025-8061 概述 MSRMapper 是一款适用于 Windows x64 的手动内核驱动映射器，它利用存在漏洞的 Lenovo 驱动 LnvMSRIO.sys 中的 CVE-2025-8061 来执行 BYOVD （自带易受攻击驱动）攻击。 该项目将 PE64 驱动直接映射到内核内存中，无需使用 sc create 或服务，并在 ring 0 中执行其 DriverEntry。整个过程依赖于： 通过 LnvMSRIO.sys 进行 MSR 和物理内存读写。 使用 DbgHelp 通过 P...

EUVD-2019-16788

Malware in sbrugna...

CVE-2019-7630

An issue was discovered in gdrv.sys in Gigabyte APP Center before 19.0227.1. The vulnerable driver exposes a wrmsr instruction via IOCTL 0xC3502580 and does not properly filter the target Model Specific Register MSR. Allowing arbitrary MSR writes can lead to Ring-0 code execution and escalation o...

R0Ak (The Ring 0 Army Knife) - A Command Line Utility To Read/Write/Execute Ring Zero On For Windows 10 Systems

r0ak is a Windows command-line utility that enables you to easily read, write, and execute kernel-mode code with some limitations from the command prompt, without requiring anything else other than Administrator privileges. Quick Peek r0ak v1.0.0 -- Ring 0 Army Knife...