https://n9o.xyz/tags/token-stealing/ Recent content in Token Stealing on Hugo -- gohugo.io en © 2026 Vaishnav Baraskar Sat, 10 Jun 2023 00:00:00 +0000 https://n9o.xyz/reverseengineering/xlogdriver/ Sat, 10 Jun 2023 00:00:00 +0000 https://n9o.xyz/reverseengineering/xlogdriver/ <h1 class="relative group">Signed Driver Exploit in XLogDriver.sys (x64 Kernel) <div id="signed-driver-exploit-in-xlogdriversys-x64-kernel" class="anchor"></div> <span class="absolute top-0 w-6 transition-opacity opacity-0 ltr:-left-6 rtl:-right-6 not-prose group-hover:opacity-100"> <a class="group-hover:text-primary-300 dark:group-hover:text-neutral-700 !no-underline" href="#signed-driver-exploit-in-xlogdriversys-x64-kernel" aria-label="Anchor">#</a> </span> </h1> <h2 class="relative group">Prologue: A Signed Invitation to Ring-0 <div id="prologue-a-signed-invitation-to-ring-0" class="anchor"></div> <span class="absolute top-0 w-6 transition-opacity opacity-0 ltr:-left-6 rtl:-right-6 not-prose group-hover:opacity-100"> <a class="group-hover:text-primary-300 dark:group-hover:text-neutral-700 !no-underline" href="#prologue-a-signed-invitation-to-ring-0" aria-label="Anchor">#</a> </span> </h2> <p>This one hit different. I was sifting through a bunch of random vendor drivers, most of them dusty utilities for things like USB logs and peripheral diagnostics. Nothing fancy. But one caught my eye: <code>XLogDriver.sys</code>.</p>