Element2023H

[Element2023H @Element2023H]

Check out UsingBYOVD, an open-source C++ tool for security research & Red Team! ⚔️

✅ SYSTEM priv-esc
✅ PPL control
✅ Kernel EDR/AV kill
✅ Unsigned driver map
✅ LSASS dump

For learning & research purposes only.
⭐ Star it if useful:
https://t.co/SgzEpTauAo

#BYOVD #RedTeam

[MagicSword @magicswordio]

New entry in LOLDrivers: KKYUM.sys

This driver exposes unauthenticated IOCTLs wrapping MmCopyVirtualMemory, no privilege checks, no access controls. Any low-privileged user can read or write arbitrary memory against any active process once it's loaded.

Thanks to @Element2023H for the research and submission. 🫡

🧩 https://t.co/GplHTFCPLi

[Element2023H @Element2023H]

@magicswordio Thanks for the shoutout! Happy to contribute this one to LOLDrivers.

[Element2023H @Element2023H]

发现了一个BYOVD “processctr.sys”具备结束进程的功能，已提交PR在https://t.co/ZRQytW4KWK，我自己的项目https://t.co/SgzEpTauAo也更新了这个驱动的利用

[Element2023H @Element2023H]

Found a BYOVD driver "ProcessCtr.sys". The IRP_MJ_DEVICE_CONTROL dispatcher accepts IOCTL 0x89DB202C with a 4-byte DWORD input (target PID) to Kill It.Visit https //github.com/magicsword-io/loldrivers/pull/358

[Element2023H @Element2023H]

@jaleshwaryadav1 是不是在抖音看过

[Element2023H @Element2023H]

@BaoshengbinCumt 现在招聘都这么卷的吗？

[Element2023H @Element2023H]

@ice_icat Newbee

[Element2023H @Element2023H]

@wangzhian8848 这难道是因为没喝过三聚氰胺，脑子也不好了吗，让他去大陆的医院好好治治

[Element2023H @Element2023H]

@__Inty__ 这声音 旭旭宝宝？

[Element2023H @Element2023H]

@whyyoutouzhele 纯邪教呀