aDLL

aDLL - Adventure of Dinamic Lynk Library aDLL is a binary analysis tool focused on the automatic discovery of DLL Hijacking vulnerabilities. The tool analyzes the image of the binary loaded in memory to search for DLLs loaded at load-time and makes use of the Microsoft Detours library to intercep...

Detours

Microsoft Research Detours Package Detours는 Windows에서 API 호출을 모니터링하고 계측하기 위한 소프트웨어 패키지입니다. Detours는 많은 ISV독립 소프트웨어 공급업체와 Microsoft의 제품 팀에서도 사용되어 왔습니다. Detours는 이제 표준 오픈 소스 라이선스MIT로 제공됩니다. 이로써 Detours를 사용하는 프로그래머의 라이선스 절차가 간소화되고 커뮤니티가 오픈 소스 도구와 프로세스를 사용하여 Detours를 지원할 수 있게 됩니다. Detours는 Windows NT...

HookTools

HookTools 概要 HookToolsは、極めて回避的なマルウェアの分析を支援するために設計された小規模なツールです。マルウェアにインジェクトして、特定の変更に対する反応を判定することができます。 機能 HookToolsには、一連の切り替え可能な機能が備わっています： モジュール名アクセス : 分析対象のプロセスが、読み込まれたモジュールの名前を取得できるようにします。 ハンドルアクセス : プロセスが他のプロセスへのハンドルを開くことを許可します。 自己ハンドルアクセス : プロセスがOpenProcessを使用して自身へのハンドルを取得できるようにします。...

DLLHSC - DLL Hijack SCanner A Tool To Assist With The Discovery Of Suitable Candidates For DLL Hijacking

DLL Hijack SCanner - A tool to generate leads and automate the discovery of candidates for DLL Search Order Hijacking Contents of this repository This repository hosts the Visual Studio project file for the tool DLLHSC, the project file for the API hooking functionality detour, the project file f...

Quake 3 Engine Client - CG_ServerCommand() Remote Overflow

Quake 3 Engine Client - CGServerCommand Remote Overflow / Quake 3 Engine Client CGServerCommand Remote Stack Overflow Exploit Win32 Written by RunningBon E-Mail: [email protected] IRC: irc.rizon.net kik This is a DLL, which gets injected into the server exe. You will need Microsoft Detours...

Quake 3 Engine Client CS_ITEMS Remote Overflow Exploit (Win32)

Exploit for unknown platform in category dos / poc ============================================================== Quake 3 Engine Client CSITEMS Remote Overflow Exploit Win32 ============================================================== / Quake 3 Engine Client CSITEMS Remote Stack Overflow Exploi...

Quake 3 Engine Client CG_ServerCommand() Remote Overflow Exploit

Exploit for unknown platform in category dos / poc ================================================================ Quake 3 Engine Client CGServerCommand Remote Overflow Exploit ================================================================ / Quake 3 Engine Client CGServerCommand Remote Stack...

Quake 3 Engine Client - 'CG_ServerCommand()' Remote Overflow

/ Quake 3 Engine Client CGServerCommand Remote Stack Overflow Exploit Win32 Written by RunningBon E-Mail: [email protected] IRC: irc.rizon.net kik This is a DLL, which gets injected into the server exe. You will need Microsoft Detours library to compile this exploit...

Quake 3 Engine Client (Windows x86) - CS_ITEms Remote Overflow

Quake 3 Engine Client Windows x86 - CSITEms Remote Overflow / Quake 3 Engine Client CSITEMS Remote Stack Overflow Exploit Win32 Written by RunningBon E-Mail: [email protected] IRC: irc.rizon.net kik This is a DLL, which gets injected into the server exe. You will need Microsoft Detours library...