Confirmed vulnerable driver from Microsoft Block List
sc.exe create asio.sys binPath=C:\windows\temp\asio.sys type=kernel && sc.exe start asio.sys sc.exe create asio.sys binPath=C:\windows\temp\asio.sys type=kernel && sc.exe start asio.sys Sandbox: execFile · Timeout: 30s
security.privilegeescalation.kernel-exploit examples:
Confirmed vulnerable driver from Microsoft Block List
Use Case: Elevate privileges
Required Privileges: kernel
MITRE ATT&CK: T1068