A few months ago while reversing EasyAntiCheat, We discovered a vulnerability inside the service's initialization. It allows any user to maliciously inject unsigned code inside the game's address space. Full writeup can be found here: back.engineering/10/08/2021/ @irql_ @_xeroxz

github.com/Sinclairq/tp-emul… PoC basic instruction emulator using NT's undocumented KiTpEmulateInstruction

For over a year, EasyAntiCheat's virtual machine code to asses kernel driver integrity was vulnerable to attacks abusing call hierarchy (the hierarchy of which functions are executed during integrity) Full write-up here: bright.engineer/posts/easyan…