cbwang505 Goto Github PK
Name: cbwang505
Type: User
Company: ZheJiang Guoli Security Technology
Bio: 始于C#,精于C&C++,醉心于Windows内核与Com组件安全研究
Twitter: cbwang505
Location: China ZheJiang Ningbo
Name: cbwang505
Type: User
Company: ZheJiang Guoli Security Technology
Bio: 始于C#,精于C&C++,醉心于Windows内核与Com组件安全研究
Twitter: cbwang505
Location: China ZheJiang Ningbo
CVE-2019-0708-EXP-Windows版单文件exe版,运行后直接在当前控制台反弹System权限Shell
CVE-2019-1458 Windows LPE Exploit
POC for cve-2019-1458
Exploit and detect tools for CVE-2020-0688
Writeup and POC for CVE-2020-0753, CVE-2020-0754 and six fixed Window DOS Vulnerabilities.
Support ALL Windows Version
CVE-2020-0796 - Windows SMBv3 LPE exploit #SMBGhost
CVE-2020-0796 Remote Code Execution POC
PoC demonstrating the use of cve-2020-1034 for privilege escalation
LPE for CVE-2020-1054 targeting Windows 7 x64
CVE-2020-1066-EXP支持Windows 7和Windows Server 2008 R2操作系统
Proof of concept exploit of Windows Update Orchestrator Service Elevation of Privilege Vulnerability
writeup of CVE-2020-1362
CVE-2021-1732 Exploit
Windows Etw LPE
win32k LPE
Monitoring and controlling kernel API calls with stealth hook using EPT
Detours is a software package for monitoring and instrumenting API calls on Windows. It is distributed in source code form.
This repository contains the source code for various .NET Core runtime diagnostic tools and documents.
动态二进制插桩框架DynamoRIO通过将程序代码进行反复插桩(Instrumentation)执行构建了源程序代码与操纵代码之间的桥梁,使DynamoRIO的客户端编写者能够在更高的层面上驾驭原有的程序代码.虽然程序的载体还是被编译成原生的汇编指令集执行,但是不管是原生代码还是程序行为逻辑DynamoRIO为我们提供丰富的API已经把这些封装成了足够友好操作方式暴露给客户端编写者使用,用户可以透明的修改原有的程序代码(HotPatch),执行追踪,Hook,调试,模拟等高级运行时操纵(Runtime Code Manipulation )技术.本文主要分析DynamoRIO插桩的主要流程和实现原理,深入源码片段中几个有意思的小节体现作者构思的巧妙之处,并附加相关demo分析让读者加深对DynamoRIO的认识.
Driver Module Framework
.NET debugger and assembly editor
Driver Buddy Reloaded is an IDA Pro Python plugin that helps automate some tedious Windows Kernel Drivers reverse engineering tasks.
Memory Debugger for Windows, Linux, Mac, and Android
DrSemu - Sandboxed Malware Detection and Classification Tool Based on Dynamic Behavior
This is a simple tool to dump all the reparse points on an NTFS volume.
Dump all information about a process or thread token.
Dynamic Instrumentation Tool Platform
A declarative, efficient, and flexible JavaScript library for building user interfaces.
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google ❤️ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.