applepie

applepie、Bochs用ハイパーバイザ実装 こんにちは！applepieへようこそ！これはファジング、イントロスペクション、バグ発見のために設計されたツールです。これは、最近のバージョンのWindows（特にWindows 10 17763で開発・テスト済み）に存在するWindows Hypervisor Platform APIを使用するハイパーバイザです。Bochsは、深いイントロスペクションとデバイスエミュレーションを提供するために使用されます。 Windows Hypervisor Platform...

applepie

applepie, a hypervisor implementation for Bochs Hello! Welcome to applepie! This is a tool designed for fuzzing, introspection, and finding bugs! This is a hypervisor using the Windows Hypervisor Platform API present in recent versions of Windows specifically this was developed and tested on...

TinyXPB

TinyXPB 要件: XP SP3 を実行している仮想マシンまたは Bochs（XP SP0 では動作しません。他のバージョンでは動作する場合があります） 使用方法: 1. build.bat を実行する 2. floppy.img を任意の場所にコピーする 3. 仮想マシン / Bochs が floppy.img から起動するように設定する 4. 起動! 実行ファイル: Tools\MakeImage\imagefs.exe - コマンドラインフロッピーイメージ操作ツール Tools\FASM\FASM.EXE - Flat Assembler コマンドラインツール 作者:...

rewind

README Rewind 是一款基于快照的覆盖率引导模糊测试器，针对 Windows 内核组件。 其思路是从一个正在运行的系统的快照开始。该快照由物理内存页面以及 CPU 状态组成。 该状态用于设置虚拟 CPU 的初始状态。通过利用按需分页，只有执行目标函数所需的页面才会从快照中读取。 由于我们使用一个专用的虚拟机，其中仅包含对执行目标函数有用的物理内存页面，因此恢复快照的速度很快。 目前有 2 个后端可用： WHVP 后端利用 WHVP（Windows 虚拟机监控程序平台）API 来提供对 Hyper-V 分区的访问。详见...

flare-ida

Code Grafter 関数置き換え Code Grafter について Code Grafter は、IDA Pro の Bochs IDB モード を使用して、Windows API 関数をインポートするコードをエミュレートできるようにする IDA Python スクリプトです。Bochs IDB モードのようなエミュレーション環境は、インポートされた関数を解決またはエミュレートしないため、特定のコードでエミュレーションを使用できず、例外が発生します。Code Grafter は、オペコードとデータを挿入してインポートされた Windows API...

ida_bochs_windows

idabochswindows 用于在原生 Bochs 调试器上使用 IDA Pro 进行 Windows 内核调试的辅助脚本（包括 PDB 符号） python3 + idapython 7.4 Bochs 调试器： Bochs 调试器 GUI： 使用方法 警告 ：在打开 IDA 之前，必须将环境变量 NTSYMBOLPATH 设置为 Windows 符号，例如： SRVC:\winsymbols 编辑 "C:\Program Files\IDA Pro 7.7\cfg\dbgbochs.cfg" BOCHSDBG =...

bochs_linux_kernel_debugging

bochslinuxkerneldebugging 用于在 Bochs 上进行 Linux 内核调试的工具（包括符号、原生 Bochs 调试器和 IDA PRO） 为 Linux 内核调试生成符号文件 按以下步骤操作： 0- 生成 nm 风格的调试信息文件 只需对调试内核映像使用 nm 命令，以 Debian 为例： 1- 安装 dbg 镜像 root@debian apt-get install linux-image-$uname -r-dbg 2- 检查 nm 是否能处理 dbg 镜像： dreg@debian nm /usr/lib/debug/boot/vmlinux-$una...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: lib/fonts: Fixed undefined behavior in bit shifting for getdefaultfont. Shifting a signed 32-bit value by 31 bits is undefined; therefore, the significant bit was changed to unsigned. The UBSAN warning appears as follows: UBSA...

CVE-2018-25220

A flaw was found in Bochs. Attackers can exploit a stack-based buffer overflow vulnerability by providing an oversized input string to the application. This can lead to arbitrary code execution, allowing attackers to run unauthorized commands with the application's privileges...

Linux Distros Unpatched Vulnerability : CVE-2018-25220

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bochs 2.6-5 contains a stack-based buffer overflow vulnerability that allows attackers to execute arbitrary code by supplying an oversized input string to the...

EUVD-2018-21698

Bochs 2.6-5 contains a stack-based buffer overflow vulnerability that allows attackers to execute arbitrary code by supplying an oversized input string to the application. Attackers can craft a malicious payload with 1200 bytes of padding followed by a return-oriented programming chain to overwri...

CVE-2018-25220

Bochs 2.6-5 contains a stack-based buffer overflow vulnerability that allows attackers to execute arbitrary code by supplying an oversized input string to the application. Attackers can craft a malicious payload with 1200 bytes of padding followed by a return-oriented programming chain to overwri...

UBUNTU-CVE-2018-25220

Bochs 2.6-5 contains a stack-based buffer overflow vulnerability that allows attackers to execute arbitrary code by supplying an oversized input string to the application. Attackers can craft a malicious payload with 1200 bytes of padding followed by a return-oriented programming chain to overwri...

CVE-2018-25220

Bochs 2.6-5 contains a stack-based buffer overflow vulnerability that allows attackers to execute arbitrary code by supplying an oversized input string to the application. Attackers can craft a malicious payload with 1200 bytes of padding followed by a return-oriented programming chain to overwri...

CVE-2018-25220 Bochs 2.6-5 Buffer Overflow Remote Code Execution

Bochs 2.6-5 contains a stack-based buffer overflow vulnerability that allows attackers to execute arbitrary code by supplying an oversized input string to the application. Attackers can craft a malicious payload with 1200 bytes of padding followed by a return-oriented programming chain to overwri...

CVE-2018-25220

CVE-2018-25220 affects Bochs 2.6-5 and consists of a stack-based buffer overflow triggered by an oversized input string. The description specifies an attacker-provided payload of ~1200 padding bytes followed by a return-oriented programming chain to overwrite the instruction pointer and execute s...

CVE-2018-25220

Bochs 2.6-5 contains a stack-based buffer overflow vulnerability that allows attackers to execute arbitrary code by supplying an oversized input string to the application. Attackers can craft a malicious payload with 1200 bytes of padding followed by a return-oriented programming chain to overwri...

CVE-2018-25220 Bochs 2.6-5 Buffer Overflow Remote Code Execution

Bochs 2.6-5 contains a stack-based buffer overflow vulnerability that allows attackers to execute arbitrary code by supplying an oversized input string to the application. Attackers can craft a malicious payload with 1200 bytes of padding followed by a return-oriented programming chain to overwri...

CVE-2018-25220

Removed by vendor...

BOCHS 缓冲区错误漏洞

BOCHS is a x86 architecture computer simulator developed by BOCHS company. Version 2.6-5 of BOCHS contains a buffer overflow vulnerability, which stems from a stack buffer overflow. This vulnerability could allow attackers to execute arbitrary code by providing the application with an excessively...