Realtime Driver.sys is a vulnerable kernel driver from the KeServiceDescriptorTable/vulnerable-drivers repository. The driver exposes dangerous kernel primitives to usermode.
sc.exe create Realtime Driver binPath=C:\windows\temp\Realtime Driver.sys type=kernel && sc.exe start Realtime Driver sc.exe create Realtime Driver binPath=C:\windows\temp\Realtime Driver.sys type=kernel && sc.exe start Realtime Driver Sandbox: execFile · Timeout: 30s
security.privilegeescalation.kernel-exploit examples:
Realtime Driver.sys is a vulnerable kernel driver from the KeServiceDescriptorTable/vulnerable-drivers repository. The driver exposes dangerous kernel primitives to usermode.
Use Case: Elevate privileges
Required Privileges: kernel
MITRE ATT&CK: T1068