Kernel-Driver — PoC Archivehttps://poc.intelseclab.com/tags/kernel-driver/Latest proof-of-concept entries.Hugoen-usSun, 05 Jul 2026 00:00:00 +0000XIGNCODE3 Anti-Cheat Driver PPL-Bypass LSASS Credential Dump (CVE-2026-3609)https://poc.intelseclab.com/pocs/binary/2026-07-05_cve-2026-3609-xigncode3-lsass-credential-dump/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/binary/2026-07-05_cve-2026-3609-xigncode3-lsass-credential-dump/High severity — binary · CVE-2026-3609. Status: Weaponized. Affects: Wellbia XIGNCODE3 anti-cheat driver (xhunter1.sys). Tags: lsass, credential-dumping, anti-cheat, kernel-driver, ppl-bypass, xigncode3, windows, byovd.binaryHighlsasscredential-dumpinganti-cheatkernel-driverppl-bypassxigncode3windowsbyovdMiniTool pwdrvio.sys Kernel Write-What-Where — Local Privilege Escalation Primitive (CVE-2026-36981)https://poc.intelseclab.com/pocs/binary/2026-07-05_cve-2026-36981-minitool-kernel-driver-lpe/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/binary/2026-07-05_cve-2026-36981-minitool-kernel-driver-lpe/High severity — binary · CVE-2026-36981. Status: PoC. Affects: MiniTool pwdrvio.sys kernel driver. Tags: minitool, kernel-driver, write-what-where, lpe, arbitrary-kernel-write, windows.binaryHighminitoolkernel-driverwrite-what-wherelpearbitrary-kernel-writewindowsMiniTool pwdrvio.sys Kernel Driver Buffer Overflow — Local DoS/BSOD (CVE-2026-36980)https://poc.intelseclab.com/pocs/binary/2026-07-05_cve-2026-36980-minitool-kernel-driver-bsod-dos/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/binary/2026-07-05_cve-2026-36980-minitool-kernel-driver-bsod-dos/Medium severity — binary · CVE-2026-36980. Status: PoC. Affects: MiniTool pwdrvio.sys kernel driver. Tags: minitool, kernel-driver, ioctl, bsod, dos, pool-corruption, windows.binaryMediumminitoolkernel-driverioctlbsoddospool-corruptionwindowsKillChain — Vulnerable Kernel Driver IOCTL Protected-Process Termination (CVE-2026-0828)https://poc.intelseclab.com/pocs/binary/2026-07-05_cve-2026-0828-killchain-driver-ioctl/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/binary/2026-07-05_cve-2026-0828-killchain-driver-ioctl/High severity — binary · CVE-2026-0828. Status: Weaponized. Affects: ProcessMonitorDriver.sys (vulnerable third-party kernel driver). Tags: byovd, kernel-driver, ioctl, process-termination, edr-killer, windows, privilege-escalation, defender-bypass.binaryHighbyovdkernel-driverioctlprocess-terminationedr-killerwindowsprivilege-escalationdefender-bypass