drvtrace

tracedrv Tiny WinDbg extension to trace transitions from a debugged driver into other modules i.e. to trace function calls. Usage root@kitploit: !tracedrv 4000 trace for 4000 instructions...

SwishDbgExt

SwishDbgExt SwishDbgExt is a Microsoft WinDbg debugging extension that expands the set of available commands by Microsoft WinDbg, but also fixes and improves existing commands. This extension has been developed by Matt Suiche @msuiche – feel free to reach out on [email protected] ask for mor...

icebox

IceBox Icebox es una solución de Introspección de Máquinas Virtuales que permite rastrear y depurar sigilosamente cualquier proceso kernel o usuario. Está basado en el proyecto Winbagility. Archivos que pueden ser útiles: INSTALL.md: cómo instalar icebox. BUILD.md: cómo compilar icebox. Demo...

ida_bochs_windows

idabochswindows 用于在原生 Bochs 调试器上使用 IDA Pro 进行 Windows 内核调试的辅助脚本（包括 PDB 符号） python3 + idapython 7.4 Bochs 调试器： Bochs 调试器 GUI： 使用方法 警告 ：在打开 IDA 之前，必须将环境变量 NTSYMBOLPATH 设置为 Windows 符号，例如： root@kitploit: SRVC:\winsymbols 编辑 "C:\Program Files\IDA Pro 7.7\cfg\dbgbochs.cfg" root@kitploit: BOCHSDBG =...

bochs_linux_kernel_debugging

bochslinuxkerneldebugging Tools for Linux kernel debugging on Bochs including symbols, native Bochs debugger and IDA PRO Generate symbol file for linux kernel debugging Follow the below steps: 0- Generate a nm style debug info file just use nm command on debug kernel image, example for Debian: 1-...

windbg_js_scripts

WinDbg JavaScript Scripts Install as a WinDbg gallery Clone the repository root@kitploit: git clone https://github.com/hugsy/windbgjsscripts In windbgjsscripts\config.xml, edit the lines Setting Name="LocalCacheRootFolder" to reflect the local path of the repository. In WinDbg, load the config.xm...

CVE-2017-8890

CVE-2017-8890 Related documents: ubuntu kernel dual-machine debugging method CVE-2017-8890 Vulnerability Analysis and Exploitation - Overview CVE-2017-8890 Vulnerability Analysis - Principles CVE-2017-8890 Vulnerability Exploitation root ubuntu 16.04@kernel 4.10 CVE-2017-8890 Vulnerability...

CVE-2022-37969PoC

Contents General Introduction This was made to clarify general aspects concerning Windows exploitation. It explains basic concepts applied to CVE-2022-37969. The final result is a working PoC. It does not clarify every aspect about the CVE, but provides re-usable pieces of code and explains...

CVE-2026-72037

A flaw was found in the Linux kernel's lan743x Ethernet driver. A system lock, or spinlock, is accessed during the driver's initialization sequence before it has been properly set up. This improper initialization can lead to a system crash if kernel debugging features are enabled, resulting in a...

Intel UEFI Integrator Tools 安全漏洞

Intel UEFI Integrator Tools is a firmware integration tool from Intel Corporation USA. A security vulnerability exists in Intel UEFI Integrator Tools that originates from active debugging code in the kernel and could lead to a denial of service and elevation of privilege...

drm/amdkfd: debugfs hang_hws skip GPU with MES

...

[SECURITY] Fedora 41 Update: retsnoop-0.10.1-3.fc41

retsnoop is BPF-based tool that is meant to help debugging kernel issues. It allows to capture call stacks of kernel functions that return errors NULL or -Exxx and emits every such detected call stack, along with the captured results...

[SECURITY] Fedora 40 Update: retsnoop-0.10.1-3.fc40

retsnoop is BPF-based tool that is meant to help debugging kernel issues. It allows to capture call stacks of kernel functions that return errors NULL or -Exxx and emits every such detected call stack, along with the captured results...

OPENSUSE-SU-2024:10128-1 kernel-debug-4.8.13-1.1 on GA media

These are all security issues fixed in the kernel-debug-4.8.13-1.1 package on the GA media of openSUSE Tumbleweed...

The vulnerability of the Junos Kernel Debugging Streaming Daemon (jkdsd) in Juniper Networks’ Junos operating systems allows a hacker to cause a service failure.

The vulnerability of the Junos Kernel Debugging Streaming Daemon jkdsd in Juniper Networks’ Junos operating systems is related to synchronization errors when using shared resources for processing telemetry data. Exploiting this vulnerability can allow a malicious actor to trigger service failures...

PT-2023-6227 · Juniper Networks · Junos

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions prior to 20.4R3-S9 Juniper Networks Junos OS versions 21.1R1 and later Juniper Networks Junos OS versions prior to 21.2R3-S6 Juniper Networks Junos OS versions prior to 21.3R3-S5 Juniper Networks Junos OS...

The vulnerability in the implementation of the Lockdown Mode mechanism for Linux operating systems allows a hacker to circumvent security restrictions.

The vulnerability in the implementation of the Lockdown Mode for Linux operating system kernels is related to the insecure handling of privileges during the loading of debugging tools KGDB and KDB. Exploiting this vulnerability can allow an attacker to circumvent security restrictions...

Update of python-perf, kernel-firmware, perf, kernel-debug-devel, kernel-devel, kernel-debug-devel, kernel-headers, kernel-firmware, kernel, kernel-debug

...

Exploit for Use After Free in Microsoft

CVE-2019-0708 - BlueKeep RDP RDP Connection Sequence:...

CODE EXECUTION (CVE-2018-5189) WALKTHROUGH ON JUNGO WINDRIVER 12.5.1

INTRODUCTION Windows kernel exploitation can be a daunting area to get into. There are tons of helpful tutorials out there and originally this post was going to add to that list. This is the story of how I found CVE-2018-5189 and a complete walkthrough of the exploit development cycle. The idea w...