x64 Windows kernel code execution via user-mode, arbitrary syscall, vulnerable IOCTLs demonstration
-
Updated
Jul 6, 2022 - C++
x64 Windows kernel code execution via user-mode, arbitrary syscall, vulnerable IOCTLs demonstration
Kernsec is quick & dirty script to print kernel protections, useful informations of kernel exploitation/pwn in Kernel Land
Kernel Mitigation Telemetry Observatory — observation-only framework that verifies hardware-assisted kernel mitigations (SMEP/SMAP/PAC/CFG/KASLR/KPTI) enforce what they're configured to. Cross-platform C, with an optional Windows KMDF driver + CLI doing a live CR4/MSR handshake.
To associate your repository with the smep topic, visit your repo's landing page and select "manage topics."