/explore

Click through on any links that interest you or select the planets on the right to continue exploring the Outer Web.
You are here

 mdanilor.github.io
[Cracking Windows Kernel with HEVD] Chapter 1: Will this driver ever crash?
| | alice.climent-pommeret.red
A Syscall Journey in the Windows Kernel - Alice Climent-Pommeret
4.2 parsecs away

Travel
| |
| | klue.github.io
HEVD Stack Overflow GS
1.3 parsecs away

Travel
| | Lately, I've decided to play around with HackSys Extreme Vulnerable Driver (HEVD) for fun. It's a great way to familiarize yourself with Windows exploitation. In this blog post, I'll show how to exploit the stack overflow that is protected with /GS stack cookies on Windows 7 SP1 32 bit. You can find the source code here. It has a few more exploits written and a Win10 pre-anniversary version of the regular stack buffer overflow vulnerability.
| | www.malwaretech.com
Bypassing EDRs With EDR-Preloading
4.4 parsecs away

Travel
| | Evading user mode EDR hooks by hijacking the AppVerifier layer
| | www.thezdi.com
Zero Day Initiative - Getting Unauthenticated Remote Code Execution on the Logsign Unified SecOps Platform
25.8 parsecs away

Travel
| [AI summary] This blog post discusses two critical vulnerabilities in the Logsign Unified SecOps Platform, CVE-2024-5716 (authentication bypass) and CVE-2024-5717 (command injection), which can be combined for remote, unauthenticated code execution.