cwjchoi01/cve-2025-66678Proof-of-concept exploit for CVE-2025-66678 demonstrating arbitrary MSR and physical memory read/write via a vulnerable hardware utility driver to achieve kernel-mode privilege escalation to SYSTEM.
In Hardware Read & Write Utility v1.25.11.26, the driver exposed abritrary MSR read and write, as well as phsyical memory read and write through MmMapIoSpace, both of which enable kernel code execution.
The PoC will swap the primary token of the current process to become NT Authority\SYSTEM.
C:\Users\PublicNote: The vulnerable driver will not be shared in this project.
Read Write MSR
Read Write Physical Memory
This tool is for educational and research purposes only. Use it only on systems you own or have explicit permission to test. The author is not responsible for any misuse or damage caused by this program.
