Skip to content

Legal access: The driver and console app to demonstrate the basic memory access in kernel mode

Notifications You must be signed in to change notification settings

IgorKorkin/AllMemProTestBed

Repository files navigation

testbed

This project demonstrates the privilege escalation for a user-mode process - cmd.exe using stack overflow in the kernel mode driver.

The user-mode component 'testbed_console.exe' sends CTL_CODE with a payload to the vulnerable driver 'testbed_driver.sys', which call RtlCopyMemory without any checks. 'testbed_console.exe' includes 'testbed_driver.sys' has a resource.

About

Legal access: The driver and console app to demonstrate the basic memory access in kernel mode

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published