Exploit/Advisories

Published on April 17th, 2019 📆 | 4083 Views ⚑

0

Microsoft Windows LUAFV NtSetCachedSigningLevel Device Guard Bypass


https://www.ispeech.org/text.to.speech

On Microsoft Windows, the NtSetCachedSigningLevel system call can be tricked by the operation of LUAFV to apply a cached signature to an arbitrary file leading to a bypass of code signing enforcement under UMCI with Device Guard.





MD5 | c842665e8c982e999825c50d9c78df7a

(function(d, s, id) {
var js, fjs = d.getElementsByTagName(s)[0];
if (d.getElementById(id)) return;
js = d.createElement(s); js.id = id;
js.src = "http://connect.facebook.net/en_US/sdk.js#xfbml=1&version=v2.8&appId=409115965821184";
fjs.parentNode.insertBefore(js, fjs);
}(document, 'script', 'facebook-jssdk'));

Tagged with:



Comments are closed.