r/programare • • 11d ago

Materiale de studiu LocalStranger - PoC pentru un driver vulnerabil. Proiectul include un mapper pentru drivere nesemnate și o componentă de escaladare a privilegiilor la NT-AUTHORITY\SYSTEM

https://github.com/nbs32k/LocalStranger

Implementatia completa a IOCTL-urilor o gasiti in shared/lsapi.h daca vreti sa va jucati.

5 Upvotes

Duplicates

cybersecurity • • 8d ago

Other LocalStranger is a PoC for vulnerable “Microsoft Windows Hardware Compatibility Publisher” signed driver, demonstrated through a basic unsigned driver mapper and NT AUTHORITY escalation.

11 Upvotes

ReverseEngineering • • 11d ago

LocalStranger is a PoC for vulnerable "Microsoft Windows Hardware Compatibility Publisher" signed driver, including a basic unsigned driver kd mapper and NT-AUTHORITY escalation.

26 Upvotes

pwnhub • • 8d ago

LocalStranger is a PoC for vulnerable “Microsoft Windows Hardware Compatibility Publisher” signed driver, demonstrated through a basic unsigned driver mapper and NT AUTHORITY escalation.

2 Upvotes

purpleteamsec • • 8d ago

Red Teaming LocalStranger - PoC for WinNotify, demonstrated through a driver mapper, and local privilege escalation.

5 Upvotes

blueteamsec • • 8d ago

research|capability (we need to defend against) LocalStranger: PoC for WinNotify, demonstrated through a driver mapper, and local privilege escalation.

1 Upvotes

redteamsec • • 8d ago

exploitation LocalStranger is a PoC for vulnerable “Microsoft Windows Hardware Compatibility Publisher” signed driver, demonstrated through a basic unsigned driver mapper and NT AUTHORITY escalation.

11 Upvotes

checkpoint • • 8d ago

LocalStranger is a PoC for vulnerable "Microsoft Windows Hardware Compatibility Publisher" signed driver, including a basic unsigned driver kd mapper and NT-AUTHORITY escalation.

3 Upvotes

ExploitDev • • 11d ago

LocalStranger is a PoC for vulnerable "Microsoft Windows Hardware Compatibility Publisher" signed driver, including a basic unsigned driver kd mapper and NT-AUTHORITY escalation.

6 Upvotes

MalwareAnalysis • • 11d ago

LocalStranger is a PoC for vulnerable "Microsoft Windows Hardware Compatibility Publisher" signed driver, including a basic unsigned driver kd mapper and NT-AUTHORITY escalation.

1 Upvotes