CVE-2010-2883

CVE-2010-2883 PoC pour CVE-2010-2883 utilisant la recherche TTD, les techniques Metasploit, BOF+ROP et le HEAP spraying à des fins éducatives uniquement...

defcon_27_windbg_workshop

Atelier DEFCON 27 "Modern Debugging with WinDbg Preview" Ce dépôt contient les supports de l'atelier DEFCON 27 Vue d'ensemble Résumé Nous sommes en 2019 et pourtant, trop de développeurs Windows et de hackers s'appuient encore, les uns comme les autres, sur des outils utiles mais plutôt old schoo...

yara-ttd

yara-ttd - Le némésis ultime des packers Utilisez les règles YARA sur des traces Time Travel Debugging 1. Démo 2. Motivations 3. Installation 4. Utilisation 5. Fonctionnalités à venir Démo Un binaire packé avec UPX Un simple binaire qui lance calc.exe, packé avec UPX. yara-ttd trouve la chaîne...

recon_2024_windbg_workshop

REcon 2024 - Conseils et astuces pour mieux déboguer avec WinDbg Ce dépôt contient les supports créés pour l'atelier « Conseils et astuces pour mieux déboguer avec WinDbg », lors du REcon 2024. Configuration Les supports de l'atelier visent à fournir des fonctionnalités utiles pour WinDbg, lors d...

@toolspack/ttd-common (>=0.1.0, <=1.3.2), @toolspack/ttd-pdfjs (>=0.0.0, <=0.1.4) potentially affected by unknown CVE via babel-laoder (0.0.1-security)

babel-laoder NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on babel-laoder and may be impacted: - @toolspack/ttd-common =0.1.0, =0.0.0, =0.1.4 Source cves: unknown CVE Source advisory: OSV:MAL-2025-15281...

MAL-2025-4030 Malicious code in ttd-lithium (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 73c711048944c634cd49e0952d573c5c48f00dd01c409ae7ddb3848ae960a6fb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ttd-lithium (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 73c711048944c634cd49e0952d573c5c48f00dd01c409ae7ddb3848ae960a6fb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in ttd-lithium

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

SUSE CVE-2008-3577

Buffer overflow in src/openttd.cpp in OpenTTD before 0.6.2 allows local users to execute arbitrary code via a large filename supplied to the "-g" parameter in the ttdmain function. NOTE: it is unlikely that this issue would cross privilege boundaries in typical environments...

@toolspack/ttd-common (>=0.1.0, <=1.3.2), @toolspack/ttd-pdfjs (>=0.0.0, <=0.1.4) potentially affected by unknown CVE via babel-laoder (0.0.1-security)

babel-laoder NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on babel-laoder and may be impacted: - @toolspack/ttd-common =0.1.0, =0.0.0, =0.1.4 Source cves: unknown CVE Source advisory: OSV:GHSA-QP6M-JQFR-2F7V...

chakra: Crash in bool TTD::MarkTable::MarkAndTestAddr<

Project: https://github.com/Microsoft/ChakraCore.git Detailed report: https://oss-fuzz.com/testcase?key=5714440556118016 Project: chakra Fuzzer: jsfuzzer Job Type: asanchakra Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x556b0f9f8970 Crash State: bool TTD::MarkTable::MarkAndTestAdd...