0vercl0k Goto Github PK

0vercl0k

articles

Mirror of the different PDF articles I wrote

blazefox

Blazefox exploits for Windows 10 RS5 64-bit.

bochscpu

clairvoyance

Visualize the virtual address space of a Windows process on a Hilbert curve.

cve-2019-11708

Full exploit chain (CVE-2019-11708 & CVE-2019-9810) against Firefox on Windows 64-bit.

cve-2019-9810

Exploit for CVE-2019-9810 Firefox on Windows 64-bit.

cve-2021-24086

Proof of concept for CVE-2021-24086, a NULL dereference in tcpip.sys triggered remotely.

cve-2021-28476

PoC for CVE-2021-28476 a guest-to-host "Hyper-V Remote Code Execution Vulnerability" in vmswitch.sys.

cve-2021-31166

Proof of concept for CVE-2021-31166, a remote HTTP.sys use-after-free triggered remotely.

cve-2021-32537

PoC for CVE-2021-32537: an out-of-bounds memory access that leads to pool corruption in the Windows kernel.

cve-2022-21971

PoC for CVE-2022-21971 "Windows Runtime Remote Code Execution Vulnerability"

cve-2022-21974

PoC for CVE-2022-21974 "Roaming Security Rights Management Services Remote Code Execution Vulnerability"

cve-2022-28281

PoC for CVE-2022-28281 a Mozilla Firefox Out of bounds write.

fuzzing-ida75

Repository of the findings found by wtf when fuzzing IDA75.

gflags-rs

Utility that lets you interact with Microsoft Windows Global Flags and particularly PageHeap, made to learn Rust

inject

Yet another Windows DLL injector.

j0llydmpr

j0llydmper is a windows service that allows you to dump furtively and automaticaly some contents of USB disks just plugged in your computer. In order to dump potentialy interesting files, you can use a rule on the file name or/and on the file size.

kdmp-parser

A Windows kernel dump C++ parser library with Python 3 bindings.

kdmp-parser-rs

A KISS Rust crate to parse Windows kernel crash-dumps created by Windows & its debugger.

kepaboo

Neutralize KEPServerEX anti-debugging techniques

lockmem

This utility allows you to lock every available memory regions of an arbitrary process into its working set.

longue-vue

Longue vue is an exploit chain that can compromise over the internet NETGEAR DGND3700v2 devices.

ollydbg2-python

Scripting OllyDBG2 using Python is now possible!

paracosme

Paracosme is a zero-click remote memory corruption exploit that compromises ICONICS Genesis64 which was demonstrated successfully on stage during the Pwn2Own Miami 2022 competition.

pwn2own2023-miami

Writeups, PoCs of the bugs I found while preparing for the Pwn2Own Miami 2023 contest targeting UaGateway from the OPC UA Server category.

pywinhv

Python bindings for the Microsoft Hypervisor Platform APIs.

reflectivedllinjection

Reflective DLL injection is a library injection technique in which the concept of reflective programming is employed to perform the loading of a library from memory into a host process.

rp

rp++ is a fast C++ ROP gadget finder for PE/ELF/Mach-O x86/x64/ARM/ARM64 binaries.

rp-bf.rs

rp-bf: A library to bruteforce ROP gadgets by emulating a Windows user-mode crash-dump