Skip to content

Instantly share code, notes, and snippets.

@api0cradle
Created May 19, 2023 14:13
Show Gist options
  • Save api0cradle/d52832e36aaf86d443b3b9f58d20c01d to your computer and use it in GitHub Desktop.
Save api0cradle/d52832e36aaf86d443b3b9f58d20c01d to your computer and use it in GitHub Desktop.
A quick script to check for vulnerable drivers. Compares drivers on system with list from loldrivers.io
# Simple script to check drivers in C:\windows\system32\drivers against the loldrivers list
# Author: Oddvar Moe - @oddvar.moe
$drivers = get-childitem -Path c:\windows\system32\drivers
$web_client = new-object system.net.webclient
$loldrivers = $web_client.DownloadString(" https://www.loldrivers.io/api/drivers.json") | ConvertFrom-Json
Write-output("Checking {0} drivers in C:\windows\system32\drivers against loldrivers.io json file" -f $drivers.Count)
foreach ($lol in $loldrivers.KnownVulnerableSamples)
{
# Check for matching driver name
if($drivers.Name -contains $lol.Filename)
{
#CHECK HASH
$Hash = Get-FileHash -Path "c:\windows\system32\drivers\$($lol.Filename)"
if($lol.Sha256 -eq $Hash.Hash)
{
write-output("The drivername {0} is vulnerable with a matching SHA256 hash of {1}" -f $lol.Filename, $lol.SHA256)
}
}
}
@sec13b
Copy link

sec13b commented Aug 26, 2024

just edit line

$loldrivers = $web_client.DownloadString(" https://www.loldrivers.io/api/drivers.json") | ConvertFrom-Json

with

$loldrivers = $web_client.DownloadString("https://www.loldrivers.io/api/drivers.json") | ConvertFrom-Json

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment