Infosec.Pub
  • Communities
  • Create Post
  • Create Community
  • heart
    Support Lemmy
  • search
    Search
  • Login
  • Sign Up
digicatM to blueteamsecEnglish · 6 months ago

BYOVD to the next level (part 2) — rootkit like it's 2025

blog.quarkslab.com

external-link
message-square
0
link
fedilink
2
external-link

BYOVD to the next level (part 2) — rootkit like it's 2025

blog.quarkslab.com

digicatM to blueteamsecEnglish · 6 months ago
message-square
0
link
fedilink
BYOVD to the next level (part 2) — rootkit like it's 2025 - Quarkslab's blog
blog.quarkslab.com
external-link
Bring Your Own Vulnerable Driver (BYOVD) is a well-known post-exploitation technique used by adversaries. This blog post is part of a series. In part one we saw how to abuse a vulnerable driver to gain access to Ring-0 capabilities. In this second and final part, we provide a technical explanation on how to perform reflective driver loading.
alert-triangle
You must log in or # to comment.

blueteamsec

blueteamsec

Subscribe from Remote Instance

Create a post
You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !blueteamsec@infosec.pub

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

Visibility: Public
globe

This community can be federated to other instances and be posted/commented in by their users.

  • 12 users / day
  • 113 users / week
  • 293 users / month
  • 1K users / 6 months
  • 231 local subscribers
  • 679 subscribers
  • 3K Posts
  • 227 Comments
  • Modlog
  • mods:
  • digicat
  • BE: 0.19.17
  • Modlog
  • Instances
  • Docs
  • Code
  • join-lemmy.org