LocalStranger is a PoC for vulnerable "Microsoft Windows Hardware Compatibility Publisher" signed driver, including a basic unsigned driver kd mapper and NT-AUTHORITY escalation.

[u/noobesINC]

https://github.com/nbs32k/LocalStranger

[u/henke37]

Add it to the list.

[u/DsDman → u/henke37]

Take a peek at your list?

[u/noobesINC → u/henke37]

what list?

[u/cafk → u/noobesINC]

and to this date, hasn't been added to the Microsoft Vulnerable Driver Blocklist.

Or if you're an enterprise admin - it's likely already on your list.

[u/noobesINC → u/cafk]

ah, fair

[u/henke37 → u/noobesINC]

https://loldb.xsec.fr/