voltron

Voltron Voltron is an extensible debugger UI toolkit written in Python. It aims to improve the user experience of various debuggers LLDB, GDB, VDB and WinDbg by enabling the attachment of utility views that can retrieve and display data from the debugger host. By running these views in other TTYs...

token-priv

滥用令牌特权实现权限提升（EoP） 2017年8月 Bryan Alexander @dronesec Stephen Breen @breenmachine 本仓库包含全部代码以及一篇 Phrack 风格的研究论文，内容涉及滥用令牌特权实现权限提升。如有问题、想法、吐槽或 bug，欢迎随时联系我们。 本仓库分为三个部分： lib/，包含辅助脚本（目前仅有 pykd 令牌脚本） poptoke/，是代码的主要部分。它以项目形式组织，但需要指出并强调：它不会像现在这样直接编译并为你提供...

Zero-Day Coverage Update – Week of July 16, 2018

One night this week, I came across one of my favorite movies Willy Wonka and the Chocolate Factory. The world had gone crazy after the reclusive Willy Wonka announces that he has hidden five golden tickets in chocolate Wonka Bars that promised a factory tour and a lifetime supply of chocolate...

shadow - Firefox/Jemalloc Heap Exploitation Swiss Army Knife

A new, extended and renamed ; version of the Firefox/jemalloc heap exploitation swiss army knife. shadow has been tested with the following: Windows 8.1 x86-64 Windows 7 SP1 x86 and x86-64 WinDBG 6.3.9600.17200 x86 since Firefox stable is x86-only currently pykd version 0.3.0.36 Many different...