ret-sync

ret-sync ret-sync stands for Reverse-Engineering Tools SYNChronization. It is a set of plugins that help to synchronize a debugging session WinDbg/GDB/LLDB/OllyDbg/OllyDbg2/x64dbg with a disassembler IDA/Ghidra/Binary Ninja. The underlying idea is simple: take the best from both worlds static and...

TinyXPB

TinyXPB REQUIREMENTS: A Virtual Machine or Bochs running XP SP3 XP SP0 will not work, other versions may USAGE: 1. run build.bat 2. copy floppy.img to wherever you wish to use it 3. set virtual machine / bochs to boot from floppy.img 4. Boot! EXECUTABLES: Tools\MakeImage\imagefs.exe - Commandline...

applepie

applepie, a hypervisor implementation for Bochs Hello! Welcome to applepie! This is a tool designed for fuzzing, introspection, and finding bugs! This is a hypervisor using the Windows Hypervisor Platform API present in recent versions of Windows specifically this was developed and tested on...

flare-ida

Code Grafter Function Replacements About Code Grafter Code Grafter is an IDA Python script that makes it possible to use IDA Pro's Bochs IDB Mode to emulate code that imports Windows API functions. Emulation environments like Bochs IDB mode do not resolve or emulate imported functions, resulting ...

bochs_linux_kernel_debugging

bochslinuxkerneldebugging Tools for Linux kernel debugging on Bochs including symbols, native Bochs debugger and IDA PRO Generate symbol file for linux kernel debugging Follow the below steps: 0- Generate a nm style debug info file just use nm command on debug kernel image, example for Debian: 1-...

applepie

applepie, una implementación de hipervisor para Bochs ¡Hola! ¡Bienvenido a applepie! Esta es una herramienta diseñada para fuzzing, introspección y encontrar errores. Es un hipervisor que utiliza la API de Windows Hypervisor Platform presente en versiones recientes de Windows específicamente, fue...

bochs_linux_kernel_debugging

bochslinuxkerneldebugging Strumenti per il debug del kernel Linux su Bochs inclusi simboli, debugger Bochs nativo e IDA PRO Genera il file dei simboli per il debug del kernel Linux Segui i passaggi seguenti: 0- Genera un file di informazioni di debug in stile nm usa semplicemente il comando nm...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: lib/fonts: Fixed undefined behavior in bit shifting for getdefaultfont. Shifting a signed 32-bit value by 31 bits is undefined; therefore, the significant bit was changed to unsigned. The UBSAN warning appears as follows: UBSA...

CVE-2018-25220

A flaw was found in Bochs. Attackers can exploit a stack-based buffer overflow vulnerability by providing an oversized input string to the application. This can lead to arbitrary code execution, allowing attackers to run unauthorized commands with the application's privileges...

Linux Distros Unpatched Vulnerability : CVE-2018-25220

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bochs 2.6-5 contains a stack-based buffer overflow vulnerability that allows attackers to execute arbitrary code by supplying an oversized input string to the...

EUVD-2018-21698

Bochs 2.6-5 contains a stack-based buffer overflow vulnerability that allows attackers to execute arbitrary code by supplying an oversized input string to the application. Attackers can craft a malicious payload with 1200 bytes of padding followed by a return-oriented programming chain to overwri...

CVE-2018-25220

Bochs 2.6-5 contains a stack-based buffer overflow vulnerability that allows attackers to execute arbitrary code by supplying an oversized input string to the application. Attackers can craft a malicious payload with 1200 bytes of padding followed by a return-oriented programming chain to overwri...

CVE-2018-25220

Bochs 2.6-5 contains a stack-based buffer overflow vulnerability that allows attackers to execute arbitrary code by supplying an oversized input string to the application. Attackers can craft a malicious payload with 1200 bytes of padding followed by a return-oriented programming chain to overwri...

UBUNTU-CVE-2018-25220

Bochs 2.6-5 contains a stack-based buffer overflow vulnerability that allows attackers to execute arbitrary code by supplying an oversized input string to the application. Attackers can craft a malicious payload with 1200 bytes of padding followed by a return-oriented programming chain to overwri...

CVE-2018-25220

Removed by vendor...

CVE-2018-25220 Bochs 2.6-5 Buffer Overflow Remote Code Execution

Bochs 2.6-5 contains a stack-based buffer overflow vulnerability that allows attackers to execute arbitrary code by supplying an oversized input string to the application. Attackers can craft a malicious payload with 1200 bytes of padding followed by a return-oriented programming chain to overwri...

CVE-2018-25220

Bochs 2.6-5 contains a stack-based buffer overflow vulnerability that allows attackers to execute arbitrary code by supplying an oversized input string to the application. Attackers can craft a malicious payload with 1200 bytes of padding followed by a return-oriented programming chain to overwri...

CVE-2018-25220

CVE-2018-25220 affects Bochs 2.6-5 and consists of a stack-based buffer overflow triggered by an oversized input string. The description specifies an attacker-provided payload of ~1200 padding bytes followed by a return-oriented programming chain to overwrite the instruction pointer and execute s...

CVE-2018-25220 Bochs 2.6-5 Buffer Overflow Remote Code Execution

Bochs 2.6-5 contains a stack-based buffer overflow vulnerability that allows attackers to execute arbitrary code by supplying an oversized input string to the application. Attackers can craft a malicious payload with 1200 bytes of padding followed by a return-oriented programming chain to overwri...

CVE-2018-25220: Out-of-bounds Write

Bochs 2.6-5 contains a stack-based buffer overflow vulnerability that allows attackers to execute arbitrary code by supplying an oversized input string to the application. Attackers can craft a malicious payload with 1200 bytes of padding followed by a return-oriented programming chain to overwri...