/dev/null: Anti-Cheat Kernel Driver (2020)

Re:/dev/null: Anti-Cheat Kernel Driver (2020) by prvit on Sunday July 24, 2022 @05:00PM (#32217655)

Admin privileges don’t matter, all the stuff you care about lives in your homedir.

Have you ever seen a real world example of super common and super insecure AV drivers being exploited for LPE? Probably not, it’s not worth the trouble.

[ Parent | on HN ]

Re:/dev/null: Anti-Cheat Kernel Driver (2020) by ivegotnoaccount on Sunday July 24, 2022 @05:11PM (#32217780)

I don't know if it has been exploited on the wild, but the subject seemingly interested some enough to find escalations bugs in https://en.m.wikipedia.org/wiki/SafeDisc.

[ Parent | on HN ]

Re:/dev/null: Anti-Cheat Kernel Driver (2020) by prvit on Sunday July 24, 2022 @05:14PM (#32217808)

Yes, there are tons of these bugs and tons of PoCs. However, in real life, nobody bothers to exploit them because there’s very little to gain by doing so.

[ Parent | on HN ]