cbwang505 Goto Github PK

cve-2019-0708-exp-windows

CVE-2019-0708-EXP-Windows版单文件exe版,运行后直接在当前控制台反弹System权限Shell

cve-2019-1458

CVE-2019-1458 Windows LPE Exploit

cve-2019-1458_poc

POC for cve-2019-1458

cve-2020-0688

Exploit and detect tools for CVE-2020-0688

cve-2020-0753-and-cve-2020-0754

Writeup and POC for CVE-2020-0753, CVE-2020-0754 and six fixed Window DOS Vulnerabilities.

cve-2020-0787-exp-all-windows-version

Support ALL Windows Version

cve-2020-0796

CVE-2020-0796 - Windows SMBv3 LPE exploit #SMBGhost

cve-2020-0796-rce-poc

CVE-2020-0796 Remote Code Execution POC

cve-2020-1034

PoC demonstrating the use of cve-2020-1034 for privilege escalation

cve-2020-1054

LPE for CVE-2020-1054 targeting Windows 7 x64

cve-2020-1066-exp

CVE-2020-1066-EXP支持Windows 7和Windows Server 2008 R2操作系统

cve-2020-1313

Proof of concept exploit of Windows Update Orchestrator Service Elevation of Privilege Vulnerability

cve-2020-1362

writeup of CVE-2020-1362

cve-2021-1732-exploit

CVE-2021-1732 Exploit

cve-2021-33739-poc

cve-2021-34486

Windows Etw LPE

cve-2022-21882

win32k LPE

ddimon

Monitoring and controlling kernel API calls with stealth hook using EPT

detours

Detours is a software package for monitoring and instrumenting API calls on Windows. It is distributed in source code form.

diagnostics

This repository contains the source code for various .NET Core runtime diagnostic tools and documents.

diydynamorio

动态二进制插桩框架DynamoRIO通过将程序代码进行反复插桩(Instrumentation)执行构建了源程序代码与操纵代码之间的桥梁,使DynamoRIO的客户端编写者能够在更高的层面上驾驭原有的程序代码.虽然程序的载体还是被编译成原生的汇编指令集执行,但是不管是原生代码还是程序行为逻辑DynamoRIO为我们提供丰富的API已经把这些封装成了足够友好操作方式暴露给客户端编写者使用,用户可以透明的修改原有的程序代码(HotPatch),执行追踪,Hook,调试,模拟等高级运行时操纵(Runtime Code Manipulation )技术.本文主要分析DynamoRIO插桩的主要流程和实现原理,深入源码片段中几个有意思的小节体现作者构思的巧妙之处,并附加相关demo分析让读者加深对DynamoRIO的认识.

dmf

Driver Module Framework

dnspy

.NET debugger and assembly editor

driverbuddyreloaded

Driver Buddy Reloaded is an IDA Pro Python plugin that helps automate some tedious Windows Kernel Drivers reverse engineering tasks.

drmemory

Memory Debugger for Windows, Linux, Mac, and Android

drsemu

DrSemu - Sandboxed Malware Detection and Classification Tool Based on Dynamic Behavior

dumpreparsepoints

This is a simple tool to dump all the reparse points on an NTFS volume.

dumptoken

Dump all information about a process or thread token.

dynamorio

Dynamic Instrumentation Tool Platform

dyndataresolver