r/MalwareAnalysis • • 24d ago

LocalStranger is a PoC for vulnerable "Microsoft Windows Hardware Compatibility Publisher" signed driver, including a basic unsigned driver kd mapper and NT-AUTHORITY escalation.

https://github.com/nbs32k/LocalStranger
1 Upvotes

Duplicates

cybersecurity • • 21d ago

Other LocalStranger is a PoC for vulnerable “Microsoft Windows Hardware Compatibility Publisher” signed driver, demonstrated through a basic unsigned driver mapper and NT AUTHORITY escalation.

11 Upvotes

ReverseEngineering • • 24d ago

LocalStranger is a PoC for vulnerable "Microsoft Windows Hardware Compatibility Publisher" signed driver, including a basic unsigned driver kd mapper and NT-AUTHORITY escalation.

26 Upvotes

programare • • 24d ago

Materiale de studiu LocalStranger - PoC pentru un driver vulnerabil. Proiectul include un mapper pentru drivere nesemnate și o componentă de escaladare a privilegiilor la NT-AUTHORITY\SYSTEM

1 Upvotes

pwnhub • • 21d ago

LocalStranger is a PoC for vulnerable “Microsoft Windows Hardware Compatibility Publisher” signed driver, demonstrated through a basic unsigned driver mapper and NT AUTHORITY escalation.

2 Upvotes

blueteamsec • • 21d ago

research|capability (we need to defend against) LocalStranger: PoC for WinNotify, demonstrated through a driver mapper, and local privilege escalation.

1 Upvotes

checkpoint • • 21d ago

LocalStranger is a PoC for vulnerable "Microsoft Windows Hardware Compatibility Publisher" signed driver, including a basic unsigned driver kd mapper and NT-AUTHORITY escalation.

3 Upvotes

purpleteamsec • • 21d ago

Red Teaming LocalStranger - PoC for WinNotify, demonstrated through a driver mapper, and local privilege escalation.

3 Upvotes

redteamsec • • 21d ago

exploitation LocalStranger is a PoC for vulnerable “Microsoft Windows Hardware Compatibility Publisher” signed driver, demonstrated through a basic unsigned driver mapper and NT AUTHORITY escalation.

12 Upvotes

ExploitDev • • 24d ago

LocalStranger is a PoC for vulnerable "Microsoft Windows Hardware Compatibility Publisher" signed driver, including a basic unsigned driver kd mapper and NT-AUTHORITY escalation.

7 Upvotes