token-stealing

HEVD: Windows Kernel Driver Exploitation — Stack Overflow & Arbitrary Write

Exploiting HackSys Extreme Vulnerable Driver (HEVD) on Windows 7 x86: a kernel stack buffer overflow using token-stealing shellcode, and privilege escalation via a Write-What-Where overwrite of the HalDispatchTable