admin/Astharot15-DriverStuff
1
0
Fork 0
mirror of https://github.com/Astharot15/DriverStuff synced 2026-08-09 11:59:10 +00:00
Code Issues Packages Projects Releases Wiki Activity

Update README.md

Browse Source
This commit is contained in:
Astharot15
2026-07-04 12:45:15 +02:00
committed by GitHub
parent c15c053d8b
commit d2ccde1654
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
README.md
+2 -2
View File
@@ -1,7 +1,7 @@
HEVD exploit - There are a few exploits for HEVD, ArbitraryWrite is made to unprotect processes and UaF is only the PoC, so it only makes a BSOD. HEVD exploit - There are a few exploits for HEVD, ArbitraryWrite is made to unprotect processes and UaF is only the PoC, so it only makes a BSOD.
throttlestop-exploit-rw - It is a modified version of https://lnkd.in/en6ys33U, instead of elevating privileges it unprotects lsass, I have a version to disable DSE (HVCI disabled) if anyone is interested in it, send me a DM. throttlestop-exploit-rw - It is a modified version of (https://github.com/AmrHuss/throttlestop-exploit-rw), instead of elevating privileges it unprotects lsass, I have a version to disable DSE (HVCI disabled) if anyone is interested in it, send me a DM.
unprotect - This was my first driver, it has two IOCTLs, to unprotect any process and another one to elevate privileges. unprotect - This was my first driver, it has two IOCTLs, to unprotect any process and another one to elevate privileges.
Keylogger - It is the code I talked about in my blog https://lnkd.in/eqeqAVTx, It is only a CTF challenge so it doesn't do too much, if you want to use it modify OnReadCompletion function, but I am pretty sure that it is caught by EDRs (not by basic AVs, of course). Keylogger - It is the code I talked about in my blog (https://astharot15.github.io/posts/keylogger/), It is only a CTF challenge so it doesn't do too much, if you want to use it modify OnReadCompletion function, but I am pretty sure that it is caught by EDRs (not by basic AVs, of course).