admin/kkent030315-evil-mhyprot-cli
1
0
Fork 0
mirror of https://github.com/kkent030315/evil-mhyprot-cli synced 2026-08-31 14:05:59 +00:00
Code Issues Packages Projects Releases Wiki Activity
Page: The Vulnerable Driver
Pages
(Ongoing) Enumerate Handle Table Copy Kernel Memory Copy Process Memory Driver Initialization Enumerate Process Modules Enumerate Process Threads Home IOCTL Handlers System Uptime Terminate Process The Vulnerable Driver
Clone
2
The Vulnerable Driver
Kento Oki edited this page 2020-10-23 20:23:38 +09:00
Table of Contents

The mhyprot is an anti-cheat kernel mode driver used in Genshin Impact.
The driver has vulnerable IOCTL commands that allows us to execute improperly from ring-3 (usermode),
without privileges that usually needed to be granted by OS system.

Usermode Module

Driver's device handle is opened by the game process GenshinImpact.exe.

IMAGE