Skip to content

Commit 7a06448

Browse files
splintersfuryclaude
andcommitted
Update homepage with full Tier 2 results and LOLDrivers corpus stats
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
1 parent 4a3b3b5 commit 7a06448

1 file changed

Lines changed: 5 additions & 1 deletion

File tree

docs/index.md

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -14,6 +14,7 @@ A structured knowledge base for Windows kernel driver exploitation, organized as
1414

1515
| Date | What's New |
1616
|------|------------|
17+
| **2026-03-12** | [KDU Provider Compatibility](reference/kdu-compatibility.md) and [LOLDrivers Deep Analysis](reference/loldrivers-analysis.md) updated with full 1,775-driver Tier 2 Ghidra results. 1,404 KDU-compatible (79%), 354 Tier 2 confirmed, 122 confirmed MapDriver candidates with physical + virtual memory primitives reachable from IOCTL handlers. All mitigations, ROP gadgets, and I/O methods scored. |
1718
| **2026-03-01** | Backfill: 13 case studies added for 2022--2024 CVEs with published exploit research. CLFS ransomware chain (CVE-2022-24521, CVE-2022-35803, CVE-2023-23376), Project Zero registry audit (CVE-2022-34707, CVE-2023-23420), DEVCORE kernel streaming (CVE-2024-30090, CVE-2024-30084, CVE-2024-38144), activation context bugs (CVE-2022-22047, CVE-2022-41073). Corpus now at 147 CVEs, 57 exploited ITW. |
1819
| **2026-03-01** | New guide: [Why Kernel Drivers?](guides/why-kernel-drivers.md) -- what hardware enforces, what only Ring 0 can do, user-mode alternatives, the security cost, and Microsoft's trajectory toward constraining kernel code. |
1920
| **2026-02-28** | New guides: [Corpus Analytics](guides/corpus-analytics.md), [Exploit Chain Patterns](guides/exploit-chain-patterns.md), [Patch Patterns](guides/patch-patterns.md), [Mitigation Timeline](guides/mitigation-timeline.md). New deep dives: [afd.sys](case-studies/afd-deep-dive.md) (13 CVEs), [win32k](case-studies/win32k-deep-dive.md) (12 CVEs), [ntfs.sys](case-studies/ntfs-deep-dive.md) (7 CVEs). |
@@ -135,7 +136,10 @@ A structured knowledge base for Windows kernel driver exploitation, organized as
135136
<span class="ks-stat-num">2</span> remotely exploitable<br>
136137
<span class="ks-stat-num">12</span> driver type categories &nbsp;&middot;&nbsp;
137138
<span class="ks-stat-num">57</span> technique pages &nbsp;&middot;&nbsp;
138-
<span class="ks-stat-num">80+</span> AutoPiff detection rules
139+
<span class="ks-stat-num">80+</span> AutoPiff detection rules<br>
140+
<span class="ks-stat-num">1,775</span> LOLDrivers analyzed &nbsp;&middot;&nbsp;
141+
<span class="ks-stat-num">354</span> Tier 2 Ghidra confirmed &nbsp;&middot;&nbsp;
142+
<span class="ks-stat-num">122</span> confirmed MapDriver candidates
139143
</div>
140144

141145
## Recommended Paths

0 commit comments

Comments
 (0)