Hello everyone, In this post, I want to walk through a Windows kernel driver research session that started as a simple curiosity and slowly turned into something much more interesting. The target was WinCDEmu’s kernel driver, BazisVirtualCDBus.sys. WinCDEmu is a […]
Tag: driver
Hunting Bugs in ElbyCDIO.sys: From a Simple IOCTL Review to Kernel Pointer Leak, Local DoS and Access Control Bypass
Hello everyone, I recently spent some time looking at ElbyCDIO.sys, the kernel driver installed by Virtual CloneDrive / Elaborate Bytes. My goal was not to throw random IOCTLs at the driver and hope for a crash. I wanted to treat […]


