https://hackingpassion.com/tags/drivers/Recent content in Drivers on HackingPassion.com : root@HackingPassion.com-[~]HugoenThu, 13 Aug 2026 14:09:08 +0200https://hackingpassion.com/plug-and-pwn-windows-pnp-usb-system/Thu, 13 Aug 2026 14:09:08 +0200https://hackingpassion.com/plug-and-pwn-windows-pnp-usb-system/<h1 id="plug-and-pwn-turns-a-fake-usb-device-into-system-on-fully-patched-windows-11">Plug and Pwn Turns a Fake USB Device Into SYSTEM on Fully Patched Windows 11</h1> <p>Two researchers took over a fully updated Windows 11 machine in <strong>five minutes</strong> with a USB device that was never there. The machine sat at the login screen. Windows downloaded the vulnerable software itself. 🧐</p> <p>Plug and Play is the part of Windows that makes hardware work without you doing anything. You connect a printer, a webcam, a phone, and a few seconds later it works. What happens in those seconds is that the device announces what it is, Windows takes that announcement at face value, looks up the matching software package at Microsoft, downloads it, and installs it. That installation does not run as you. It runs as <code>NT AUTHORITY\SYSTEM</code>, the account with more power on the machine than the administrator has, and it never asks permission, because there is no prompt anywhere in that flow.</p>