corpus.blog
41,554 blogs · 5,225,211 posts Claim your blog
Record · corpus.blog/posts/01a08c65-1c05-7260-a6e8-69c43501c812

Bring Your Own Trusted Caller (BYOTC): A New Way to Exploit Vulnerable Windows Drivers (Part 1)

xusheng.dev · published 3 September 2026

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at xusheng.dev Wayback capture
0blogs citing
First cited
—
Most recent
—
Rank this month
not ranked
External links
28
Words captured
3,003

Cited by

No blog we hold has cited this post yet.

Links from this post

Link
Host
https://learn.microsoft.com/en-us/windows/security/application-security/application-control/app-control-for-business/design/microsoft-recommended-driver-block-rules
learn.microsoft.com
https://www.loldrivers.io/
loldrivers.io
https://www.malwarebytes.com/
malwarebytes.com
https://www.systeminformer.com/
systeminformer.com
https://github.com/winsiderss/systeminformer/blob/553d309edb07934bda9387cff29a82ca1714acbb/kphlib/include/kphapi.h
github.com
https://github.com/winsiderss/systeminformer/blob/553d309edb07934bda9387cff29a82ca1714acbb/KSystemInformer/cid_tracking.c
github.com
https://github.com/winsiderss/systeminformer/blob/553d309edb07934bda9387cff29a82ca1714acbb/KSystemInformer/verify.c
github.com
https://github.com/winsiderss/systeminformer/blob/553d309edb07934bda9387cff29a82ca1714acbb/KSystemInformer/comms.c
github.com
https://github.com/winsiderss/systeminformer/blob/553d309edb07934bda9387cff29a82ca1714acbb/KSystemInformer/protection.c
github.com
https://github.com/winsiderss/systeminformer/blob/553d309edb07934bda9387cff29a82ca1714acbb/phlib/kph.c
github.com
https://github.com/winsiderss/systeminformer/blob/553d309edb07934bda9387cff29a82ca1714acbb/SystemInformer/ksisup.c
github.com
https://github.com/winsiderss/systeminformer/blob/553d309edb07934bda9387cff29a82ca1714acbb/KSystemInformer/informer_process.c
github.com
https://github.com/winsiderss/systeminformer/commit/0f189f43a4b72c1766bab7e3293f7a85ae23b25e
github.com
https://github.com/winsiderss/systeminformer/commit/fd70a88fa809a01fe2197e53d0516bb599c9fb42
github.com
https://www.riotgames.com/en/news/a-message-about-vanguard-from-our-security-privacy-teams
riotgames.com
https://learn.microsoft.com/en-us/windows/win32/services/protecting-anti-malware-services-
learn.microsoft.com
https://blogs.windows.com/windowsexperience/2025/11/18/preparing-for-whats-next-windows-security-and-resiliency-innovations-help-organizations-mitigate-risks-recover-faster-and-prepare-for-the-era-of-ai/
blogs.windows.com
https://developer.apple.com/documentation/bundleresources/entitlements/com.apple.security.cs.disable-library-validation
developer.apple.com
https://eclypsium.com/blog/screwed-drivers-signed-sealed-delivered/
eclypsium.com
https://research.checkpoint.com/2024/breaking-boundaries-investigating-vulnerable-drivers-and-mitigating-risks/
research.checkpoint.com
https://blog.talosintelligence.com/exploring-vulnerable-windows-drivers/
blog.talosintelligence.com
https://doi.org/10.1145/3564625.3564631
doi.org
https://link.springer.com/article/10.1186/s42400-025-00434-w
link.springer.com
https://www.ndss-symposium.org/ndss-paper/unveiling-byovd-threats-malwares-use-and-abuse-of-kernel-drivers/
ndss-symposium.org
https://arxiv.org/abs/2606.07732
arxiv.org
https://github.com/zeze-zeze/ioctlance
github.com
https://threatunpacked.com/2026/02/04/building-a-scalable-windows-driver-vulnerability-analyzer-part-2/
threatunpacked.com
https://ydinkin.substack.com/p/200-kernel-bugs-in-30-days
ydinkin.substack.com
Elsewhere on xusheng.dev (2)