WhatsApp-Double-Free-Vulnerability_CVE-2019-11932

Analisi della vulnerabilità WhatsApp Double-Free CVE-2019-11932 con il debugger GEF-GDB Questa vulnerabilità è stata scoperta dal ricercatore Awakened, che ha pubblicato un PoC di exploit per questo bug. In questo blog, dimostrerò come funziona questo exploit eseguendo un debug dinamico con...

gef

GEF pronunciato ʤɛf - "Jeff" è un insieme di comandi per x86/64, ARM, MIPS, PowerPC e SPARC per assistere gli sviluppatori di exploit e i reverse-engineer quando usano il classico GDB. Fornisce funzionalità aggiuntive a GDB tramite l'API Python per supportare il processo di analisi dinamica e...

heappy

🙂 Heappy: un allegro editor per l'heap Heappy è un editor basato su gdb/gef che ti aiuta a gestire l'heap durante lo sviluppo di exploit. Il progetto va considerato uno strumento didattico utile a comprendere l'evoluzione dell'heap durante il ciclo di vita del processo. È stato creato per...

gdb-static

GDB/GDBServer statisch Beschreibung Öffentliches Repository von statischem GDB und GDBServer. Links https://github.com/hugsy/gef https://github.com/hugsy/gef-extras...

angrgdb

angrgdb Use angr inside GDB. Create an angr state from the current debugger state. Install root@kitploit: pip install angrgdb echo "python import angrgdb.commands" /.gdbinit Usage angrgdb implements the angrdbg API in GDB. You can use it in scripts like this: root@kitploit: from angrgdb import...

heappy

🙂 Heappy: a happy heap editor Heappy is an editor based on gdb/gef that helps you to handle the heap during your exploitation development. The project should be considered a didactic tool useful to understand the evolution of the heap during the process life cycle. It has been created to simplify...

CVE-2025-25504

An issue in the /usr/local/bin/jncs.sh script of Gefen WebFWC In AV over IP products v1.85h, v1.86v, and v1.70 allows attackers with network access to connect to the device over TCP port 4444 without authentication and execute arbitrary commands with root privileges...

Fedora: Security Advisory for eclipse-gef (FEDORA-2020-cf8ef2f333)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 32 Update: eclipse-gef-3.11.0-13.fc32

The Graphical Editing Framework GEF allows developers to create a rich graphical editor from an existing application model. GEF is completely application neutral and provides the groundwork to build almost any application, including but not limited to: activity diagrams, GUI builders, class diagr...

From 0 to ReverseShell: router vulnerabilities range the Dvar practice-vulnerability warning-the black bar safety net

The Dvar is a simulation of the arm architecture of the router vulnerability the shooting range, this article will introduce how to get a reverse shell, the intermediate will contain the environment to build, bugs to locate and use, as well as this practical experience. 1. Knowledge base This...

Apple Mac OSX - Kernel Exploitable Null Pointer Dereference in nvCommandQueue::GetHandleIndex in GeF

Exploit for macOS platform in category dos / poc / Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=784 The method nvCommandQueue::GetHandleIndex doesn't check whether this+0x5b8 is non-null before using it. We can race a call to this method this with another thread calling...

Oracle: Security Advisory (ELSA-2011-0568)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...