Fumo Loader - All in one kernel-based DLL injector
-
Updated
Jul 8, 2026 - C++
#
vulnerable-driver
Here are 12 public repositories matching this topic...
Kernel-mode process terminator using a signed BYOVD driver. Works on all Windows 10/11. No offsets, no PDB. Rust.
rust windows-kernel evasion offensive-security kernel-exploitation red-team redteam av-bypass vulnerable-drivers edr-bypass edr-evasion byovd process-termination vulnerable-driver av-killer edr-killer
-
Updated
Oct 1, 2026 - Rust
Advanced PoC & Research for CVE-2026-0828 (Safetica) and CVE-2025-7771 (ThrottleStop). Analysis of BYOVD (Bring Your Own Vulnerable Driver) TTPs for Ring 0 process termination and physical memory R/W. Researching EDR-Killer patterns, PPL bypasses, and kernel-mode primitives used by MedusaLocker and other threat actors.
exploit kernel-driver fud av-evasion edr ethicalhacking avbypass edr-bypass edr-evasion byovd vulnerable-driver av-killer edr-killer antivirus-removal foreverday
-
Updated
Sep 30, 2026 - C
Windows BYOVD research on DCRCVDrv.sys and Alinubx.sys, reverse engineering their kernel primitives, IOCTL surfaces, and detection opportunities.
reverse-engineering antivirus kernel-mode ring0 kernel-exploitation ioctl edr av-bypass windows-internals windows-security edr-evasion threatresearch byovd windows-exploit kernel-security process-termination vulnerable-driver av-killer edr-killer driver-security
-
Updated
Oct 1, 2026 - Rust
Vulnerable Drivers
-
Updated
Jul 30, 2026
A BYOVD PoC exploitation Alinubx.sys to terminate Windows processes.
kernel-driver evasion ring0 kernel-exploitation red-team av-evasion redteam kernel-exploit av-bypass kill-process ring-zero vulnerable-drivers edr-bypass edr-evasion byovd process-termination kill-av vulnerable-driver evasion-techniques loldrivers
-
Updated
Sep 10, 2026 - C++
Scans for popular vulnerable drivers that can be exploited to map unsigned driver to kernel space.
-
Updated
Jul 5, 2025 - C++
LOLDrivers YARA Rule Generator
vulnerability-detection yara yara-rules blueteam detection-rules blue-team vulnerable-drivers byovd vulnerable-driver loldrivers
-
Updated
Jun 30, 2026 - Python
Windows process memory mirroring through the signed vulnerable Panda driver PSMEMDriver (BYOVD): read/write via mapped physical pages, no OpenProcess/ReadProcessMemory.
-
Updated
Sep 13, 2026 - C++
Vanguard Bypass Pro is a cutting-edge utility designed to enhance system compatibility and streamline software performance. It offers advanced environment management for a smoother and more flexible experience.
kernel-exploit driver-loader manual-map kdmapper vulnerable-driver manual-syscall dse-bypass vmexit hypervisor-bypass disable-pg bypass-patchguard ntdll-hook tiano-bypass uc-mapper etw-patch kernel-callback-removal ring0-exploit
-
Updated
Jun 25, 2026
A simple writeup of an driver found in the LOLDrivers repository.
-
Updated
May 9, 2026 - C
POC for vulnerable driver DrvHWX64.sys (Totally unique EDR driver exposing various functions via IOCTL)
windows kernel driver windows-kernel vulnerability antivirus vulnerable windows-driver byovd vulnerable-driver edr-driver
-
Updated
Jul 10, 2026 - C
Add this topic to your repo
To associate your repository with the vulnerable-driver topic, visit your repo's landing page and select "manage topics."