---
id: 4334
title: "BYOVD to the next level (part 2) — rootkit like it's 2025"
source_domain: blog.quarkslab.com
source_url: "https://blog.quarkslab.com/exploiting-lenovo-driver-cve-2025-8061_part2.html"
published_at: "2025-10-08 22:00"
tags: ["windows", "post-exploitation", "kernel", "driver", "byovd", "reflective-loading"]
phying_url: "https://phying.com/item/4334"
lang: en
---

# BYOVD to the next level (part 2) — rootkit like it's 2025

## Summary

Part two of Quarkslab's BYOVD series: using read/write primitives from a vulnerable driver to reflectively load an unsigned driver from memory and bypass Windows Driver Signature Enforcement.

## Intelligence Metadata

- **Sources:** blog.quarkslab.com
- **Published:** 2025-10-08 22:00
- **Original:** https://blog.quarkslab.com/exploiting-lenovo-driver-cve-2025-8061_part2.html
- **Phying News:** https://phying.com/item/4334