Tag: drivers

1 Attack Reports | 0 Vulnerabilities

Attack reports

Kernel shellcode persistence technique in APT attacks and CTF challenge

A security flaw in Windows 7 and Server 2008 R2 allows kernel shellcode to be hidden in the registry and executed during boot, despite patches. This vulnerability was exploited in a 2018 targeted attack. The SAS CTF challenge involved analyzing this technique, which uses buffer overflows in DirectX…
windows
persistence
shellcode
2024-10-17
drivers
ctf
buffer overflow
CVE-2010-4398
directx
kernel
registry
Published: October 17, 2024
Downloadable IOCs: 0
Click here to see more Attack Reports