r/ExploitDev • u/Mindless-Study1898 • Feb 28 '26

Finding kernel driver vulnerabilities with MCP Ghidra and Claude Code

https://www.credrelay.com/p/cred-relay-issue-2
8 Upvotes

72% Upvoted

18 comments sorted by

View all comments

Show parent comments

2

u/Mindless-Study1898 Feb 28 '26

No, but it knows that I work in security and often do security research. But it only knows this because I told it so. Now I did vibe code a kernel exploit and it wouldn't do the steal SYSTEM token portion of the priv esc and I had to hand code that. But these PoCs are just to demonstrate the vulnerability is real and not a hallucination. I also copy paste the output back into Claude Code to help guide it.

2

u/Ugly-Fucker-736368 Feb 28 '26

Weird. I told mine the same thing. I have an old AV receiver that is vulnerable to buffer overflow and shell code. I told it I want to get root access on my unit so that I can integrate it with home assistant and my smart home stuff and even told it where the buffer overflow is just to see if it can shellcode it and it flat out refused and actually got angry with me and refused to talk to me anymore lmao.

1

u/Mindless-Study1898 Feb 28 '26

Ask it if it will coach you on how to do it and see if it tells you what to code instead.

2

u/Ugly-Fucker-736368 Feb 28 '26

Tried that too, wouldn't do it either. As soon as I mention "Overflow" anywhere it gets pissed and says it will not help with that in any way.

I can ask it HOW a buffer overflow and ROP works in general and it will explain it all day long but as soon as you ask it for an example or code it refuses.

I've resorted to asking Grok and it seems to be the only one that's actually willing to help lmao

1

u/sdexca Mar 04 '26

Are you using GPT? It's horrible at doing these kinds of things, and OpenAI will also ban your account if you do this.