1개월 전 · Jul 15, 2026 9:10 PM
To spoof hard drive SMART serial numbers at the kernel level:
- Attach a filter driver to
\Driver\Diskor\Driver\Storport. - Intercept
IRP_MJ_DEVICE_CONTROLrequests whereIoControlCode == IOCTL_STORAGE_QUERY_PROPERTY. - Set an
IoCompletionRoutineand pass the IRP down the driver stack. - In the completion routine, when the disk controller fills the
STORAGE_DEVICE_DESCRIPTORbuffer, scramble theSerialNumberOffsetstring with randomized alphanumeric bytes before returning to userland!