search

hacksysteam / HackSysExtremeVulnerableDriver

HackSys Extreme Vulnerable Driver (HEVD) - Windows & Linux
https://hacksys.io
GNU General Public License v3.0
2.42k stars 525 forks source link

Arbitrary Overwrite: DWORD -> QWORD #19

Closed GradiusX closed 3 years ago

GradiusX commented 7 years ago

The Write-What-Where vulnerability only allows you to write a DWORD, even in 64-bit.

Would be nice to have both options in 64-bit: 1) DWORD -> Partial Arbitrary Overwrite (this is already there) 2) QWORD -> Full Arbitrary Overwrite

hacksysteam commented 7 years ago

@GradiusX True, I will implement it soon as I get some time

hacksysteam commented 5 years ago

@GradiusX I was looking into this and I think the Arbitrary Overwrite already does QWORD write on x64 as it uses PULONG_PTR. Can you check again?