Skip to content

Abusing SpeedFan driver ability of physical memory manipulation

Notifications You must be signed in to change notification settings

SamLarenN/SpeedFan-Exploit

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

6 Commits
 
 
 
 
 
 
 
 
 
 

Repository files navigation

SpeedFan-Exploit

Abusing SpeedFan driver ability of physical memory manipulation

With only access to physical memory we are able to find an EPROCESS structure by "bruteforcing" or iterating, if you will, over blocks of memory labeled with a pooltag. Pooltags with "Proc" are possible EPROCESS structures of different processes.

Cred to waryas for supplying Superfetch methods!

About

Abusing SpeedFan driver ability of physical memory manipulation

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published