Re:Windows x64 handcrafted token stealing kernel-mode shellcode
by Perolan2 on Tuesday July 05, 2022 @11:28AM
(#31989360)
No, not just privilege escalation. This is shellcode that needs to be inserted into a vulnerable driver, as it has to run from kernel space. Being privileged isn’t enough to run this function.
[ Parent
| on HN ]
There are no comments on this comment yet.