19 matches found
HWSyscalls
HWSyscalls मुख्य योगदानकर्ता विवरण HWSyscalls अप्रत्यक्ष syscalls indirect syscalls को निष्पादित करने की एक नई विधि है जिसमें 3 मुख्य घटक शामिल हैं: निष्पादन के प्रवाह को नियंत्रित करने के लिए Hardware breakpoints और Vectored Exception Handler। syscall नंबर और पते खोजने के लिए HalosGate का उपयोग...
hwbp4mw
本文最初是为 VX-Underground Black Mass Halloween Edition 2022 撰写的。 Hook 引擎： 多线程安全的 x86/x64 硬件断点 Hook 引擎 C PAGEGUARD/hwbp 断点库 C++20 hwbp 库（DLL 示例）C++20 利用调试寄存器实现的通用 x64 用户态规避技术： TamperingSyscalls2 C TamperingSyscalls2 C++20 可用的 ETW/AMSI Hook 示例 rad9800/misc 恶意软件硬件断点 v 1.0 我们的任务是轻松地 Hook...
VectoredOverloading
VectoredOverloading Vectored Overloading é uma técnica de injeção PE local que foi observada pela primeira vez no malware KidKadi. Funciona manipulando o carregamento de uma DLL legítima usando Breakpoints de Hardware HWBP e Tratamento de Exceção Vetorizado VEH para alterar o objeto de seção da D...
hbp-attack-demo
से फोर्क किया गया https://github.com/veritas501/hbpattackdemo hbpattack demo P0 ब्लॉग देखें: https://googleprojectzero.blogspot.com/2022/12/exploiting-CVE-2022-42703-bringing-back-the-stack-attack.html एक vuln module बनाया, यह दिखावा कि हमारे पास कर्नेल में किसी भी पते पर लिखने का प्रिमिटिव है,...
LazyHook
نظرة عامة LazyHook هو إطار عمل خفي لربط استدعاءات الـ API API Hooking يتجاوز أنظمة منع التسلل على مستوى المضيف HIPS من خلال انتحال مكدس الاستدعاءات Call Stack Spoofing. من خلال استغلال نقاط التوقف العتادية على مستوى المعالج Hardware Breakpoints ومعالجة الاستثناءات الموجهة Vectored Exception...
gdbfuzz
GDBFuzz: Debugger-Driven Fuzzing This is the companion code for the paper: 'Fuzzing Embedded Systems using Debugger Interfaces'. A preprint of the paper can be found here https://publications.cispa.saarland/3950/. The code allows the users to reproduce and extend the results reported in the paper...
gdbfuzz
GDBFuzz: التعتيم القائم على مصحح الأخطاء هذا هو الكود المصاحب للورقة: 'Fuzzing Embedded Systems using Debugger Interfaces'. يمكن العثور على نسخة مسبقة من الورقة هنا https://publications.cispa.saarland/3950/. يسمح الكود للمستخدمين بإعادة إنتاج وتوسيع النتائج المذكورة في الورقة. يرجى الاستشهاد...
GhostlyHollowingViaTamperedSyscalls2
टैम्पर्ड सिस्कॉल्स के माध्यम से घोस्टली हॉलोइंग पुनः अपलोड सूचना !NOTE मूल रिपॉजिटरी में पहले एक गलत लाइसेंस इस्तेमाल किया गया था जिसमें DeceptIQ के संस्थापक, @Rad9800, को श्रेय नहीं दिया गया था, जिनकी TamperingSyscalls रिपॉजिटरी MIT लाइसेंस के अंतर्गत प्रकाशित है। उनके कार्य को पहले से ही...
Exploit for Use After Free in Linux Linux_Kernel
From https://github.com/veritas501/hbpattackdemo hbpattack...
CAPEv2 - Malware Configuration And Payload Extraction
CAPE is a malware sandbox. It was derived from Cuckoo with the goal of adding automated malware unpacking and config extraction - hence its name is an acronym: 'Config And Payload Extraction'. Automated unpacking allows classification based on Yara signatures to complement network Suricata and...
kernel: ptrace() incorrect error handling leads to corruption and DoS
An address corruption flaw was discovered in the Linux kernel built with hardware breakpoint CONFIGHAVEHWBREAKPOINT support. While modifying a h/w breakpoint via 'modifyuserhwbreakpoint' routine, an unprivileged user/process could use this flaw to crash the system kernel resulting in DoS OR to...
kernel: ptrace() incorrect error handling leads to corruption and DoS
An address corruption flaw was discovered in the Linux kernel built with hardware breakpoint CONFIGHAVEHWBREAKPOINT support. While modifying a h/w breakpoint via 'modifyuserhwbreakpoint' routine, an unprivileged user/process could use this flaw to crash the system kernel resulting in DoS OR to...
kernel: ptrace() incorrect error handling leads to corruption and DoS
An address corruption flaw was discovered in the Linux kernel built with hardware breakpoint CONFIGHAVEHWBREAKPOINT support. While modifying a h/w breakpoint via 'modifyuserhwbreakpoint' routine, an unprivileged user/process could use this flaw to crash the system kernel resulting in DoS OR to...
kernel: ptrace() incorrect error handling leads to corruption and DoS
An address corruption flaw was discovered in the Linux kernel built with hardware breakpoint CONFIGHAVEHWBREAKPOINT support. While modifying a h/w breakpoint via 'modifyuserhwbreakpoint' routine, an unprivileged user/process could use this flaw to crash the system kernel resulting in DoS OR to...
kernel: ptrace() incorrect error handling leads to corruption and DoS
An address corruption flaw was discovered in the Linux kernel built with hardware breakpoint CONFIGHAVEHWBREAKPOINT support. While modifying a h/w breakpoint via 'modifyuserhwbreakpoint' routine, an unprivileged user/process could use this flaw to crash the system kernel resulting in DoS OR to...
kernel: ptrace() incorrect error handling leads to corruption and DoS
An address corruption flaw was discovered in the Linux kernel built with hardware breakpoint CONFIGHAVEHWBREAKPOINT support. While modifying a h/w breakpoint via 'modifyuserhwbreakpoint' routine, an unprivileged user/process could use this flaw to crash the system kernel resulting in DoS OR to...
OllyDbg 2.01 alpha 3 Released !
OllyDbg 2.01 alpha 3 Released ! A major update with many new features. Here are the most important: - Support for multi-monitor configurations - Hardware breakpoints and fast command emulation now co-operate. That is, run trace rund at full speed up to and exceeding 500000 commands per second...
CVE-2001-1347
CVE-2001-1347 affects Windows 2000. The vulnerability arises when a local user sets a hardware breakpoint that is handled via global debug registers, which can cause other processes to terminate due to an exception and may allow hijacking of resources such as named pipes. The available sources de...
CVE-2001-1347
Windows 2000 allows local users to cause a denial of service and possibly gain privileges by setting a hardware breakpoint that is handled using global debug registers, which could cause other processes to terminate due to an exception, and allow hijacking of resources such as named pipes...