CVE-2025-8061-Exploit

Exploit CVE-2025-8061 Visão Geral Exploit de Prova de Conceito para LnvMSRIO.sys Driver MSR I/O da Lenovo, demonstrando leitura/escrita arbitrária de memória física e acesso à memória do kernel através da tradução VA-para-PA do Superfetch. Informações do Driver Propriedade| Valor ---|--- Nome do...

CVE-2025-7771

Rust में लिखा गया एक एक्सप्लॉइट ऐप CVE-2025-7771 के लिए सोर्स कोड की एक झलक data.rs, कमजोर ड्राइवर बाइनरी को स्टैटिक ऐरे के रूप में संग्रहीत करता है exploit.rs, उस कमजोर ड्राइवर पर आधारित आर्बिट्ररी रीड/राइट प्रिमिटिव लागू करता है filemap.rs, win32 फ़ाइल मैपिंग ऑप्स के लिए एक सरल रैपर nt.rs, Rust...

Kernel-Arbitrary-Read-Vulnerability-Superfetch-EOP

Kernel-Arbitrary-Read-Vulnerability-Superfetch-EOP ثغرة القراءة التعسفية في النواة + استغلال Superfetch EOP استنادًا إلى بحث من https://starlabs.sg/blog/2022/06-trying-to-exploit-a-windows-kernel-arbitrary-read-vulnerability/ . يجب تشغيل الاستغلال من مستوى تكامل منخفض...

Eneio64-LPE

Abre um handle para o driver vulnerável 2. Mapeia a memória física no espaço do usuário 3. Abre um handle para o processo System 4. Consulta a tabela SystemHandleInformation do processo atual para obter o handle de sistema vazado, revelando o endereço do EPROCESS. 5. Percorre os...

lenovo-dispatcher-poc

Lenovo Dispatcher PoC यह Lenovo dispatcher ड्राइवर LnvMSRIO.sys CVE-2025-8061 का शोषण करने के लिए एक बुनियादी proof of concept है। कमजोरियाँ Luis Casvella द्वारा पाई गईं स्रोत: https://blog.quarkslab.com/exploiting-lenovo-driver-cve-2025-8061.html। इस poc का मुख्य विचार केवल read/write प्रिमिटिव्...

CVE-2025-7771

CVE-2025-7771 Un PoC simple démontrant la vulnérabilité dans le pilote ThrottleStop.sys, montrant des capacités de lecture et d'écriture arbitraires en mémoire physique, ainsi que la traduction d'adresses virtuelles en adresses physiques via Superfetch. ⚡ Utilisation : 1. Enregistrer un service :...

CVE-2021-31955

Windows Kernel Information Disclosure Vulnerability Recent assessments: gwillcox-r7 at June 17, 2021 3:23pm UTC reported: Ah good old NtQuerySystemInformation strikes again, never quite going out of style : In this case CVE-2021-31955 is an information disclosure in good old ntoskrnl.exe, aka the...

Finding Evil in Windows 10 Compressed Memory, Part One: Volatility and Rekall Tools

Paging all digital forensicators, incident responders, and memory manager enthusiasts! Have you ever found yourself at a client site working around the clock to extract evil from a Windows 10 image? Have you hit the wall at step zero, running into difficulties viewing a process tree, or enumerati...

Windows Prefetch Folder

Nessus was able to retrieve and display the contents of the Windows prefetch folder %systemroot%\prefetch. This information shows programs that have run with the prefetch and superfetch mechanisms enabled. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid77668;...