IOCTL-Proxy
g <g_ orange-bat com> |
Sunday, December 21 2008 12:03.22 CST |
This is a POC of IOCTL fuzzer. It gave surprisingly good results.
IOCTL-Proxy works by hooking NtDeviceIoControlFile, manipulating its' parameters and feeding them to the real function.
Load the driver and simply click around in application you want to test.
You will get a lot of BSODS, be careful.
PreviousMode==KernelMode is ignored, since we are only interested in calls from UserMode to KernelMode, not Kernel->Kernel.
Get it here:
http://www.orange-bat.com
Comments
| Posted: Wednesday, December 31 1969 18:00.00 CST | |