HackSys Extreme Vulnerable Driver Writeups with CSharp
My writeups for HackSys Extreme Vulnerable Driver. All writeups are written with CSharp (except for DLL). Tested on following OS:
Description
Windows 7 SP1 x86
To build codes, open HEVD_Win7x86.sln and run build. All codes are generated in bin folder under the home directory.
| Project Name | Description |
|---|---|
| DoubleFetch | Writeup for Double Fetch vulnerability. Multiple CPU core required. |
| InjectLib | Sample DLL for Insecure Kernel Resource Access vulnerability. This DLL attempts to add hevdtest user with password Password123! and add hevdtest to Administrators group. |
| InsecureKernelResourceAccess | Writeup for Insecure Kernel Resource Access vulnerability. DLL for DLL Hijacking is required. |
| IntegerOverflow | Writeup for Integer Overflow vulnerablity. |
| NullPointerDereference | Writeup for Null Pointer Dereference vulnerablity. |
| PoolOverflow | Writeup for Pool Overflow vulnerablity. |
| StackOverflow | Writeup for Stack Overflow vulnerablity. |
| StackOverflowGS | Writeup for Stack Overflow vulnerablity with Stach Canary. |
| TypeConfusion | Writeup for Type Confusion vulnerablity. |
| UninitializedHeapVariable | Writeup for Uninitialized Heap Variable vulnerablity. |
| UninitializedStackVariable | Writeup for Uninitialized Stack Variable vulnerablity. |
| UseAfterFree | Writeup for Use-After-Free vulnerablity. |
| WriteNull | Writeup for Write NULL vulnerablity. |
| WriteWhatWhere | Writeup for Arbitrary Overwrite vulnerablity. |
| WriteWhatWhereGDI | Writeup for Arbitrary Overwrite vulnerablity with GDI memory leak. |
Windows 10 Version 1903 x64
To build codes, open HEVD_Win10x64.sln and run build. All codes are generated in bin folder under the home directory.
| Project Name | Description |
|---|---|
| ArbitraryIncrement | Writeup for Arbitrary Increment vulnerablity. |
| ArbitraryReadWrite | Writeup for Arbitrary Read and Write vulnerablity. |
| ArbitraryWrite | Writeup for Arbitrary Overwrite vulnerablity. |
| InjectLib | Sample DLL for Insecure Kernel Resource Access vulnerability. This DLL attempts to add hevdtest user with password Password123! and add hevdtest to Administrators group. |
| InsecureKernelResourceAccess | Writeup for Insecure Kernel Resource Access vulnerability. DLL for DLL Hijacking is required. |
Acknowledgments
- HackSys Team (@HackSysTeam)
- b33f (@FuzzySec)