To keep track of the posts in all our IOCTL-Proxy
Posted 12-21-2008 at 01:10 PM by _g_
This is a POC of IOCTL fuzzer. It gave surprisingly good results.
IOCTL-Proxy works by hooking NtDeviceIoControlFile, manipulating its' parameters and feeding them to the real function.
Load the driver and simply click around in application you want to test.
You will get a lot of BSODS, be careful.
PreviousMode==KernelMode is ignored, since we are only interested in calls from UserMode to KernelMode, not Kernel->Kernel.
Get it here:
http://www.orange-bat.com
IOCTL-Proxy works by hooking NtDeviceIoControlFile, manipulating its' parameters and feeding them to the real function.
Load the driver and simply click around in application you want to test.
You will get a lot of BSODS, be careful.
PreviousMode==KernelMode is ignored, since we are only interested in calls from UserMode to KernelMode, not Kernel->Kernel.
Get it here:
http://www.orange-bat.com
Total Comments 7
Comments
Total Trackbacks 0
