#ASUSDriverHub
One-Click RCE in Asus's Preinstalled Driver Software https://mrbruh.com/asusdriverhub/ (http://news.ycombinator.com/item?id=43951588)
May 11, 2025 at 11:03 AM
🌐AsusのプリインストールドライバーソフトウェアにおけるワンクリックRCE
https://mrbruh.com/asusdriverhub/
via #HackerNews
May 12, 2025 at 7:15 PM
If you use an Asus laptop there is no way to prevent it from downloading and running kernel-level vendor services. I tried everything. Nothing worked.

Now a one-click RCA exploit was found in Asusware. So, you click a link and an .exe is downloaded and ran on your PC. 😬

mrbruh.com/asusdriverhub/
June 13, 2025 at 11:45 PM
This is wild. If you have a newer ASUS motherboard or DriverHub installed you might want to watch this.

TL;DW: there was something in Driverhub that allowed anyone to install programs as admin on your PC from a website

www.youtube.com/watch?v=xC8q...
mrbruh.com/asusdriverhub/
How’d They Let This Happen?
YouTube video by Low Level
www.youtube.com
June 14, 2025 at 12:14 PM
One-Click RCE in Asus's Preinstalled Driver Software
https://mrbruh.com/asusdriverhub/
[comments] [100 points]
May 11, 2025 at 9:03 AM
If you have Asus hardware, or if you have ASUS Driver Hub installed for any other reason, read this: mrbruh.com/asusdriverhub/ #security #windows #asus
MrBruh's Epic Blog
One-Click RCE in ASUS’s Preinstalled Driver Software Introduction This story begins with a conversation about new PC parts. After ignoring the advice from my friend, I bought a new ASUS motherboard fo...
mrbruh.com
May 12, 2025 at 5:00 AM
One-Click RCE in Asus's Preinstalled Driver Software https://mrbruh.com/asusdriverhub/ (http://news.ycombinator.com/item?id=43951588)
May 11, 2025 at 12:13 PM
«I asked ASUS if they offered bug bounties. They responded saying they do not, but they would instead put my name in their “hall of fame”. This is understandable since ASUS is just a small startup and likely does not have the capital to pay a bounty.»

mrbruh.com/asusdriverhub/
MrBruh's Epic Blog
One-Click RCE in ASUS’s Preinstalled Driver Software Introduction This story begins with a conversation about new PC parts. After ignoring the advice from my friend, I bought a new ASUS motherboard fo...
mrbruh.com
May 11, 2025 at 2:32 PM
"One-Click RCE in ASUS’s Preinstalled Driver Software"

mrbruh.com/asusdriverhub/ #infosec #rce
MrBruh's Epic Blog
One-Click RCE in ASUS’s Preinstalled Driver Software Part Two of this series on ASUS will be dropping within a week, yes it somehow manages to get worse Introduction This story begins with a conversat...
mrbruh.com
May 15, 2025 at 7:48 AM
We can debate if what I spend time reading is relevant to work, of course.

This was a fun read.

mrbruh.com/asusdriverhub/
MrBruh's Epic Blog
One-Click RCE in ASUS’s Preinstalled Driver Software Introduction This story begins with a conversation about new PC parts. After ignoring the advice from my friend, I bought a new ASUS motherboard fo...
mrbruh.com
May 12, 2025 at 2:53 PM
One-Click RCE in Asus's Preinstalled Driver Software
L: https://mrbruh.com/asusdriverhub/
C: https://news.ycombinator.com/item?id=43951588
posted on 2025.05.11 at 01:11:18 (c=0, p=4)
May 11, 2025 at 7:30 AM
ASUS did the big brain move of bundling a hijackable rootkit into their UEFI and using ACPI to install it onto Windows. My favorite part though is dude basically got paid in exposure and is rightfully salty about it

mrbruh.com/asusdriverhub/
MrBruh's Epic Blog
One-Click RCE in ASUS’s Preinstalled Driver Software Introduction This story begins with a conversation about new PC parts. After ignoring the advice from my friend, I bought a new ASUS motherboard fo...
mrbruh.com
May 11, 2025 at 7:57 PM
One-Click RCE in Asus's Preinstalled Driver Software https://mrbruh.com/asusdriverhub/ (http://news.ycombinator.com/item?id=43951588)
May 12, 2025 at 7:04 PM
One-Click RCE in Asus's Preinstalled Driver Software

https://mrbruh.com/asusdriverhub/
May 11, 2025 at 8:00 AM
Tre nuove vulnerabilità colpiscono Output Messenger, MagicINFO 9 e Asus DriverHub: spionaggio, botnet e RCE al centro degli attacchi #AsusDriverHub #botnet #CVE202527920 #cybersecurity #MagicINFO9 #MarbledDust #OutputMessenger #samsung #vulnerabilità  #zeroday www.matricedigitale.it/sicurezza-in...
May 13, 2025 at 6:25 AM
One-Click RCE in ASUS’s Preinstalled Driver Software

ASUS DriverHub's improper origin validation allows RCE via crafted domains and malicious INI files, enabling silent admin-level code execution.

https://mrbruh.com/asusdriverhub/

#ASUSDriver #RemoteCodeExecution
May 20, 2025 at 5:30 AM