Chaos-Rootkit

Chaos-Rootkit Chaos-Rootkit は、カーネル内部とルートキット技術をより深く理解するために私が書いた x64 Ring 0 ルートキットです。 GUI バージョン 機能 プロセスの非表示: この機能は、DKOM を使用してプロセス一覧ツールからプロセスを隠すことができます。 特定のプロセスの特権を昇格: この機能により、特定のプロセスの特権を昇格できます。 ディスク上およびメモリ内のドライバーを Microsoft 製ドライバーと交換: この実装の功績はすべて IDontCode Back Engineering...

page-table-exploitation

page-table-exploitation ページテーブルを使用して ring-0 で任意のコードを実行し、権限昇格につながる方法の実演です。例として CVE-2016-7255 を使用しています。...

Cronos-Rootkit

Cronos Rootkit Cronos は Windows 10/11 x64 ring 0 ルートキットです。Cronos はプロセスを隠蔽し、トークン操作で保護および権限昇格を行うことができます。 特徴 プロセスの隠蔽 プロセスの権限昇格 プロセスの保護 貢献 貢献を歓迎します。...

oni-framework

Oni-Framework Oni framework は、組み込みデバイスソフトウェア開発のためのプラットフォームです。組み込みデバイスのリモートデバッグや機能追加のために使用されます。現時点での主なコンセプトは、完全にモジュール化されたプラグインシステムと、ローカルおよびリモートのRPCです。これはring-0特権レベルで動作するように設計されていますが、少し調整すればring-3レベルでも使用できます。警告しておきますが、これは本番環境用では ありません 。研究用の簡単なビルドプラットフォームを求める開発者専用です。...

CentOS Linux 8.5 [TuxCare] Security Update: microcode_ctl (CENTOS8.5:CLSA-2026:1789116715)

The CentOS Linux 8.5 host has a package installed that is affected by a vulnerability as referenced in the TuxCare CENTOS8.5:CLSA-2026:1789116715 advisory. - Improper handling of values for some IntelR Processors within Ring 0: Kernel, Hypervisor and Bare Metal OS may allow an escalation of...

CentOS Linux 8.4 [TuxCare] Security Update: microcode_ctl (CENTOS8.4:CLSA-2026:1789116898)

The CentOS Linux 8.4 host has a package installed that is affected by a vulnerability as referenced in the TuxCare CENTOS8.4:CLSA-2026:1789116898 advisory. - Improper handling of values for some IntelR Processors within Ring 0: Kernel, Hypervisor and Bare Metal OS may allow an escalation of...

CentOS Linux 8 [TuxCare] Security Update: microcode_ctl (CENTOS-STREAM8:CLSA-2026:1789117244)

The CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the TuxCare CENTOS- STREAM8:CLSA-2026:1789117244 advisory. - Improper handling of values for some IntelR Processors within Ring 0: Kernel, Hypervisor and Bare Metal OS may allow an escalation of...

MSRMapper

MSRMapper Windows x64 向け BYOVD 手動マッパー · CVE-2025-8061 概要 MSRMapper は Windows x64 向けの手動カーネルドライバマッパーであり、脆弱な Lenovo ドライバ LnvMSRIO.sys に存在する CVE-2025-8061 を悪用して BYOVD Bring Your Own Vulnerable Driver 攻撃を実行します。 本プロジェクトは、sc create やサービスを使用せずに PE64 ドライバをカーネルメモリへ直接マッピングし、その DriverEntry...

Intel® PROSet/Wireless WiFi Software Advisory-01468

Summary: Potential security vulnerabilities for some Intel® PROSet/Wireless WiFi Software may allow escalation of privileges, information disclosure or denial of service. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2026-24911...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: microcode_ctl (UTSA-2026-110879)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-110879 advisory. Improper handling of values for some IntelR Processors within Ring 0: Kernel, Hypervisor and Bare Metal OS may allow an escalation of privilege. Authorized adversary...

MiracleLinux 9 : microcode_ctl-20260210-1.20260812.1.el9_8 (AXSA:2026-1871:08)

The remote MiracleLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2026-1871:08 advisory. kernel: hypervisor: Intel Processors: Privilege escalation in Ring 0 via improper value handling CVE-2025-35973 kernel: microcodectl: Intel Xeon 6...

microcode_ctl security, bug fix, and enhancement update

An update is available for microcodectl. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The microcodectl packages provide microcode updates for Intel and AMD...

RLSA-2026:67979 Important: microcode_ctl security, bug fix, and enhancement update

The microcodectl packages provide microcode updates for Intel and AMD processors. Security Fixes: kernel: hypervisor: Intel Processors: Privilege escalation in Ring 0 via improper value handling CVE-2025-35973 kernel: microcodectl: Intel Xeon 6 Processors: Privilege escalation via improper memory...

kernel: hypervisor: Intel Processors: Privilege escalation in Ring 0 via improper value handling

A flaw was found in IntelR Processors within Ring 0, affecting the kernel, hypervisor, and bare metal operating systems. Improper handling of values may allow an authorized adversary with privileged user access to perform a local, high-complexity attack. This can lead to an escalation of privileg...

Important: Red Hat Security Advisory: microcode_ctl security, bug fix, and enhancement update

An update for microcodectl is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

kernel: hypervisor: Intel Processors: Privilege escalation in Ring 0 via improper value handling

A flaw was found in IntelR Processors within Ring 0, affecting the kernel, hypervisor, and bare metal operating systems. Improper handling of values may allow an authorized adversary with privileged user access to perform a local, high-complexity attack. This can lead to an escalation of privileg...

RHEL 10 : microcode_ctl (RHSA-2026:67979)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:67979 advisory. The microcodectl packages provide microcode updates for Intel and AMD processors. Security Fixes: kernel: hypervisor: Intel Processors:...

ALSA-2026:68011 Important: microcode_ctl security, bug fix, and enhancement update

The microcodectl packages provide microcode updates for Intel and AMD processors. Security Fixes: kernel: hypervisor: Intel Processors: Privilege escalation in Ring 0 via improper value handling CVE-2025-35973 kernel: microcodectl: Intel Xeon 6 Processors: Privilege escalation via improper memory...

RLSA-2026:65147 Important: microcode_ctl security, bug fix, and enhancement update

The microcodectl packages provide microcode updates for Intel and AMD processors. Security Fixes: kernel: hypervisor: Intel Processors: Privilege escalation in Ring 0 via improper value handling CVE-2025-35973 kernel: microcodectl: Intel Xeon 6 Processors: Privilege escalation via improper memory...

Important: Red Hat Security Advisory: microcode_ctl security, bug fix, and enhancement update

An update for microcodectl is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...