Toggle light / dark theme

Making Vulnerable Drivers Exploitable Without Hardware — The BYOVD Perspective

First, we use pnputil to deploy the driver package into the Windows Driver Store.

Next, we use devcon to create a new software-emulated device node with an arbitrary hardware ID that matches one defined in the driver’s INF file. This action triggers the PnP manager to detect the newly staged driver as the best match for the device.

As a result, the driver’s AddDevice routine gets executed.

Leave a Comment

Lifeboat Foundation respects your privacy! Your email address will not be published.

/* */