A exploit for the ThrottleStop driver.# CVE-2025-7771
Exploit to invoke arbitrary kernel-mode functions from usermode by abusing ThrottleStop driver.
---
# Demonstration

---
# References
https://github.com/jonomango/superfetch
https://securelist.com/av-killer-exploiting-throttlestop-sys/117026/
[4.0K] /data/pocs/9f02c814923975a7f9f7e36923946d45c430a137
├── [ 28K] demonstration.png
├── [ 680] main.cpp
├── [ 303] README.md
├── [4.0K] throttlestop
│ ├── [ 164] common.h
│ ├── [4.0K] service
│ │ ├── [1.9K] service.cpp
│ │ └── [ 268] service.h
│ ├── [4.0K] superfetch
│ │ ├── [3.9K] nt.h
│ │ └── [6.4K] superfetch.h
│ ├── [4.4K] throttlestop.cpp
│ └── [2.8K] throttlestop.h
└── [ 49K] ThrottleStop.sys
4 directories, 11 files