2
The Vulnerable Driver
Kento Oki edited this page 2020-10-23 20:23:38 +09:00

The mhyprot is an anti-cheat kernel mode driver used in Genshin Impact.
The driver has vulnerable IOCTL commands that allows us to execute improperly from ring-3 (usermode),
without privileges that usually needed to be granted by OS system.

Usermode Module

Driver's device handle is opened by the game process GenshinImpact.exe.

IMAGE