Skip to content
/ sysret Public
forked from jajp777/sysret

Windows Kernel Intel x64 SYSRET Vulnerability Exploit

Notifications You must be signed in to change notification settings

740i/sysret

 
 

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

4 Commits
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

Windows Kernel Intel x64 SYSRET Vulnerability Exploit + Kernel Code Signing Bypass Bonus

The shellcode disables kernel Code Signing and will grant NT SYSTEM privilege to specified Application or already running process (PID). exploit successfully tested on Windows 7 SP0/1 (x64) and Windows 2008 R2 SP1 (x64).

-Shahriyar Jalayeri ( @ponez )

About

Windows Kernel Intel x64 SYSRET Vulnerability Exploit

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages

  • C 92.1%
  • C++ 5.2%
  • Objective-C 1.8%
  • Other 0.9%