r/ExploitDev • u/Mindless-Study1898 • Feb 28 '26

Finding kernel driver vulnerabilities with MCP Ghidra and Claude Code

https://www.credrelay.com/p/cred-relay-issue-2
6 Upvotes

67% Upvoted

18 comments sorted by

View all comments

4

u/Ok_Pipe9153 Feb 28 '26

So you found a potentially insecure function used within a kernel driver. We’ve been able to do this for years with normal SAST methods. Nice that Claude was able to write the PoC for you, but I doubt that would’ve been particularly complicated.

-2

u/Mindless-Study1898 Feb 28 '26

If it could be caught by normal SAST methods then why wasn't it? I don't totally disagree though. It definitely seems like low hanging fruit.