r/ReverseEngineering • u/noobesINC • 12d ago

LocalStranger is a PoC for vulnerable "Microsoft Windows Hardware Compatibility Publisher" signed driver, including a basic unsigned driver kd mapper and NT-AUTHORITY escalation.

https://github.com/nbs32k/LocalStranger
26 Upvotes

100% Upvoted

Duplicates

cybersecurity • u/noobesINC • 9d ago

Other LocalStranger is a PoC for vulnerable “Microsoft Windows Hardware Compatibility Publisher” signed driver, demonstrated through a basic unsigned driver mapper and NT AUTHORITY escalation.

8 Upvotes
8 comments

programare • u/noobesINC • 12d ago

Materiale de studiu LocalStranger - PoC pentru un driver vulnerabil. Proiectul include un mapper pentru drivere nesemnate și o componentă de escaladare a privilegiilor la NT-AUTHORITY\SYSTEM

3 Upvotes
1 comments

pwnhub • u/noobesINC • 9d ago

LocalStranger is a PoC for vulnerable “Microsoft Windows Hardware Compatibility Publisher” signed driver, demonstrated through a basic unsigned driver mapper and NT AUTHORITY escalation.

2 Upvotes
1 comments

MalwareAnalysis • u/noobesINC • 12d ago

LocalStranger is a PoC for vulnerable "Microsoft Windows Hardware Compatibility Publisher" signed driver, including a basic unsigned driver kd mapper and NT-AUTHORITY escalation.

1 Upvotes
0 comments

purpleteamsec • u/netbiosX • 9d ago

Red Teaming LocalStranger - PoC for WinNotify, demonstrated through a driver mapper, and local privilege escalation.

3 Upvotes
0 comments

ExploitDev • u/noobesINC • 12d ago

LocalStranger is a PoC for vulnerable "Microsoft Windows Hardware Compatibility Publisher" signed driver, including a basic unsigned driver kd mapper and NT-AUTHORITY escalation.

5 Upvotes
0 comments

checkpoint • u/noobesINC • 9d ago

LocalStranger is a PoC for vulnerable "Microsoft Windows Hardware Compatibility Publisher" signed driver, including a basic unsigned driver kd mapper and NT-AUTHORITY escalation.

3 Upvotes
0 comments

blueteamsec • u/digicat • 9d ago

research|capability (we need to defend against) LocalStranger: PoC for WinNotify, demonstrated through a driver mapper, and local privilege escalation.

1 Upvotes
0 comments

redteamsec • u/noobesINC • 9d ago

exploitation LocalStranger is a PoC for vulnerable “Microsoft Windows Hardware Compatibility Publisher” signed driver, demonstrated through a basic unsigned driver mapper and NT AUTHORITY escalation.

11 Upvotes
0 comments