SwishDbgExt

SwishDbgExt SwishDbgExt is a Microsoft WinDbg debugging extension that expands the set of available commands by Microsoft WinDbg, but also fixes and improves existing commands. This extension has been developed by Matt Suiche @msuiche – feel free to reach out on [email protected] ask for mor...

drvtrace

tracedrv Tiny WinDbg extension to trace transitions from a debugged driver into other modules i.e. to trace function calls. Usage !tracedrv 4000 trace for 4000 instructions...

CVE-2017-8890

CVE-2017-8890 Related documents: ubuntu kernel dual-machine debugging method CVE-2017-8890 Vulnerability Analysis and Exploitation - Overview CVE-2017-8890 Vulnerability Analysis - Principles CVE-2017-8890 Vulnerability Exploitation root ubuntu 16.04@kernel 4.10 CVE-2017-8890 Vulnerability...

CVE-2022-37969PoC

Contents General Introduction This was made to clarify general aspects concerning Windows exploitation. It explains basic concepts applied to CVE-2022-37969. The final result is a working PoC. It does not clarify every aspect about the CVE, but provides re-usable pieces of code and explains...

icebox

IceBox Icebox es una solución de Introspección de Máquinas Virtuales que permite rastrear y depurar sigilosamente cualquier proceso kernel o usuario. Está basado en el proyecto Winbagility. Archivos que pueden ser útiles: INSTALL.md: cómo instalar icebox. BUILD.md: cómo compilar icebox. Demo...

ida_bochs_windows

idabochswindows Script auxiliar para depuración del kernel de Windows con IDA Pro en el depurador nativo de Bochs incluidos símbolos PDB python3 + idapython 7.4 Depurador de Bochs: GUI del depurador de Bochs: Uso ADVERTENCIA : ANTES DE ABRIR IDA debes establecer la variable de entorno: NTSYMBOLPA...

bochs_linux_kernel_debugging

bochslinuxkerneldebugging Herramientas para la depuración del kernel de Linux en Bochs incluye símbolos, depurador nativo de Bochs e IDA PRO Generar archivo de símbolos para la depuración del kernel de Linux Siga los siguientes pasos: 0- Generar un archivo de información de depuración estilo nm...

windbg_js_scripts

Scripts de JavaScript para WinDbg Instalar como una galería de WinDbg Clona el repositorio git clone https://github.com/hugsy/windbgjsscripts En windbgjsscripts\config.xml, edita las líneas Setting Name="LocalCacheRootFolder" para que reflejen la ruta local del repositorio. En WinDbg, carga el...

CVE-2026-72037

A flaw was found in the Linux kernel's lan743x Ethernet driver. A system lock, or spinlock, is accessed during the driver's initialization sequence before it has been properly set up. This improper initialization can lead to a system crash if kernel debugging features are enabled, resulting in a...

Intel UEFI Integrator Tools 安全漏洞

Intel UEFI Integrator Tools is a firmware integration tool from Intel Corporation USA. A security vulnerability exists in Intel UEFI Integrator Tools that originates from active debugging code in the kernel and could lead to a denial of service and elevation of privilege...

drm/amdkfd: debugfs hang_hws skip GPU with MES

...

[SECURITY] Fedora 41 Update: retsnoop-0.10.1-3.fc41

retsnoop is BPF-based tool that is meant to help debugging kernel issues. It allows to capture call stacks of kernel functions that return errors NULL or -Exxx and emits every such detected call stack, along with the captured results...

[SECURITY] Fedora 40 Update: retsnoop-0.10.1-3.fc40

retsnoop is BPF-based tool that is meant to help debugging kernel issues. It allows to capture call stacks of kernel functions that return errors NULL or -Exxx and emits every such detected call stack, along with the captured results...

OPENSUSE-SU-2024:10128-1 kernel-debug-4.8.13-1.1 on GA media

These are all security issues fixed in the kernel-debug-4.8.13-1.1 package on the GA media of openSUSE Tumbleweed...

The vulnerability of the Junos Kernel Debugging Streaming Daemon (jkdsd) in Juniper Networks’ Junos operating systems allows a hacker to cause a service failure.

The vulnerability of the Junos Kernel Debugging Streaming Daemon jkdsd in Juniper Networks’ Junos operating systems is related to synchronization errors when using shared resources for processing telemetry data. Exploiting this vulnerability can allow a malicious actor to trigger service failures...

PT-2023-6227 · Juniper Networks · Junos

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions prior to 20.4R3-S9 Juniper Networks Junos OS versions 21.1R1 and later Juniper Networks Junos OS versions prior to 21.2R3-S6 Juniper Networks Junos OS versions prior to 21.3R3-S5 Juniper Networks Junos OS...

The vulnerability in the implementation of the Lockdown Mode mechanism for Linux operating systems allows a hacker to circumvent security restrictions.

The vulnerability in the implementation of the Lockdown Mode for Linux operating system kernels is related to the insecure handling of privileges during the loading of debugging tools KGDB and KDB. Exploiting this vulnerability can allow an attacker to circumvent security restrictions...

Update of python-perf, kernel-firmware, perf, kernel-debug-devel, kernel-devel, kernel-debug-devel, kernel-headers, kernel-firmware, kernel, kernel-debug

...

Exploit for Use After Free in Microsoft

CVE-2019-0708 - BlueKeep RDP RDP Connection Sequence:...

CODE EXECUTION (CVE-2018-5189) WALKTHROUGH ON JUNGO WINDRIVER 12.5.1

INTRODUCTION Windows kernel exploitation can be a daunting area to get into. There are tons of helpful tutorials out there and originally this post was going to add to that list. This is the story of how I found CVE-2018-5189 and a complete walkthrough of the exploit development cycle. The idea w...