Exploit/Advisories
Published on April 17th, 2019 📆 | 4083 Views ⚑
0Microsoft Windows LUAFV NtSetCachedSigningLevel Device Guard Bypass
https://www.ispeech.org/text.to.speech
On Microsoft Windows, the NtSetCachedSigningLevel system call can be tricked by the operation of LUAFV to apply a cached signature to an arbitrary file leading to a bypass of code signing enforcement under UMCI with Device Guard.
c842665e8c982e999825c50d9c78df7a
(function(d, s, id) {
var js, fjs = d.getElementsByTagName(s)[0];
if (d.getElementById(id)) return;
js = d.createElement(s); js.id = id;
js.src = "http://connect.facebook.net/en_US/sdk.js#xfbml=1&version=v2.8&appId=409115965821184";
fjs.parentNode.insertBefore(js, fjs);
}(document, 'script', 'facebook-jssdk'));
Gloss