egorrsp/cve-2020-15368-asrdrv103-researchReverse engineering research of ASRock AsrDrv103.sys (CVE-2020-15368), covering its driver interface, encrypted request protocol, and privileged hardware access primitives.
This repository contains my materials related to the reverse engineering of the ASRock AsrDrv103.sys Windows kernel driver associated with CVE-2020-15368.
The project was created as a practical study of Windows kernel drivers, driver communication interfaces, low-level hardware access, and vulnerable driver design.
I am not the original discoverer of CVE-2020-15368. The goal of this repository is to document my own analysis and understanding of the driver.
The full write-up is available in the reports directory:
SHA-256
2003b478b9fd1b3d76ec5bf4172c2e8915babbbee7ad1783794acbf8d4c2519d
7c72a7e1d42b0790773efd8700e24952
Additional materials may be added as the project develops.
The write-up is based on my own reverse engineering of the driver and uses public documentation and previous research as references, including:
Egor Rasputin
GitHub: @egorrsp
This repository is intended for educational and defensive security research purposes. Kernel-mode software and low-level hardware interfaces can cause system instability, crashes, or data corruption. Any testing should be performed only in an isolated research environment.
