mathisvickie / CVE-2021-21551
arbitrary kernel read/write in dbutil_2_3.sys, Proof of Concept Local Privilege Escalation to nt authority/system
☆53Updated 2 years ago
Related projects ⓘ
Alternatives and complementary repositories for CVE-2021-21551
- ☆57Updated 2 years ago
- Demonstrate calling a kernel function and handle process creation callback against HVCI☆48Updated last year
- ☆25Updated 3 years ago
- ☆17Updated 3 years ago
- Command like tool to print mitigation flags for running processes in a memory dump☆44Updated 4 years ago
- APC DLL Injector with NtQueueApcThread and wake up thread support☆44Updated 7 years ago
- A novel technique to communicate between threads using the standard ETHREAD structure☆110Updated 3 years ago
- Finding Truth in the Shadows☆84Updated last year
- Hook all callbacks which are registered with LdrRegisterDllNotification☆81Updated last year
- Minifilter Callback Patching Proof-of-Concept☆61Updated 2 years ago
- Enabled / Disable LSA Protection via BYOVD☆62Updated 2 years ago
- An extended proof-of-concept for the CVE-2021-21551 Dell ‘dbutil_2_3.sys’ Kernel Exploit☆23Updated 3 years ago
- ☆44Updated 4 years ago
- Weaponizing Gigabyte driver for priv escalation and bypass PPL☆68Updated 5 years ago
- A years-old exploit of a local EoP vulnerability in Kingsoft Antivirus KWatch Driver version 2009.3.17.77.☆36Updated 2 years ago
- IOCTLpus can be used to make DeviceIoControl requests with arbitrary inputs (with functionality somewhat similar to Burp Repeater).☆84Updated 2 years ago
- Hooking the GDT - Installing a Call Gate. POC for Rootkit Arsenal Book Second Edition (version 2022)☆69Updated last year
- Resolve DOS MZ executable symbols at runtime☆93Updated 2 years ago
- An example of how x64 kernel shellcode can dynamically find and use APIs☆103Updated 4 years ago
- Detours implementation (x64/x86) which used only ntdll import☆88Updated 4 months ago
- A kernel exploit leveraging NtUserHardErrorControl to elevate a thread to KernelMode and achieve arbitrary kernel R/W & more.☆28Updated 2 years ago
- ☆98Updated 2 years ago
- PoC: Rebuild A New Path Back to the Heaven's Gate (HITB 2021)☆101Updated 3 years ago
- A tool for detecting manual/direct syscalls in x86 and x64 processes using Nirvana Hooks.☆104Updated 2 years ago
- ☆37Updated last year
- PoC exploit for HP Hardware Diagnostic's EtdSupp driver☆50Updated last year
- 2022 Updated Kernelmode-Code☆30Updated 7 months ago
- ☆26Updated last month
- Exploiting ring0 memcpy-like functionality to disable Driver Signing Enforcement (DSE)☆20Updated 4 years ago
- Windows API Hashes used in the malwares☆38Updated 9 years ago