4912 matches found
Driver-HideKernelThread-IoCancelIrp
Driver-HideKernelThread-IoCancelIrp no es mi código. solo para guardarlo https://bbs.pediy.com/thread-272795.htm Principio Establece la dirección de entrada del hilo en IoCancelIrp y el contexto en el irp que creaste. Entonces el hilo llamará a IoCancelIrp. cuando sea llamado, realizará la...
matrix-rs
Hipervisor Type-2 Blue Pill del núcleo de Windows en Rust Nombre en clave: Matrix Blog: https://memn0ps.github.io/hypervisors-for-memory-introspection-and-reverse-engineering/ Un hipervisor de investigación tipo 2 basado en Rust, ligero, seguro en cuanto a memoria y extremadamente rápido, con hoo...
HyperDeceit
HyperDeceit This repository contains the full source-code of the HyperDeceit project which is a library that allows you to impersonate as Hyper-V and intercept hypercalls done by the Windows kernel. Blog post: https://reversing.info/posts/hyperdeceit/ Disclaimer The code has not been through prop...
Jormungandr
Jormungandr Jormungandr es una implementación en kernel de un cargador COFF, que permite a los desarrolladores de kernel cargar y ejecutar sus COFF en el kernel. El único tipo de COFF soportado es un COFF de kernel x64 es decir, un COFF que utilice funciones de NTOSKRNL o SSDT. Este proyecto no e...
clairvoyance
🔮 clairvoyance Clairvoyance /klɛərˈvɔɪəns /; from French clair meaning clear and voyance meaning vision from Wikipedia. Overview clairvoyance creates a colorful visualization of the page protection of an entire 64-bit process address space user and kernel running on a Windows 64-bit kernel. To...
CVE_2026_40369
CVE202640369 Exploit poc y exp para CVE202640369, relacionados con mi análisis, usa cmake. Código de depuración, archivos poc y exp para la reproducción de CVE202640369, escritos con cmake. Como siempre, basta con usar los comandos habituales de cmake para completar la compilación. Sobre el...
cve-2025-62215-exploit-poc
CVE-2025-62215 Prueba de Concepto ⚠️ ADVERTENCIA - AVISO LEGAL Y ÉTICO ESTE CÓDIGO ES SOLO PARA FINES EDUCATIVOS Y DE INVESTIGACIÓN EN SEGURIDAD. NO utilice este código en sistemas que no posea o para los que no tenga permiso explícito por escrito para realizar pruebas NO utilice este código con...
The vulnerability of the Windows Kernel component in operating systems allows attackers to enhance their privileges.
The vulnerability of the Windows Kernel component in operating systems involves the possibility of exploiting memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
CVE-2026-85360
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally...
CVE-2026-83942
Missing authorization in Windows Kernel allows an authorized attacker to elevate privileges locally...
CVE-2026-69900
Untrusted pointer dereference in Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-69723
Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information over a network...
CVE-2026-69669
Heap-based buffer overflow in Windows Kernel allows an unauthorized attacker to execute code over a network...
CVE-2026-69578
Numeric truncation error in Windows Kernel allows an authorized attacker to elevate privileges locally...
CVE-2026-69473
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally...
CVE-2026-69466
Time-of-check time-of-use toctou race condition in Windows Kernel allows an authorized attacker to elevate privileges locally...
CVE-2026-69421
Integer underflow wrap or wraparound in Windows Kernel Mode Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-69406
Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information locally...