CVE-2010-2883

CVE-2010-2883 교육 목적으로만 제공되는 CVE-2010-2883용 PoC로, TTD 연구, Metasploit 기법, BOF+ROP 및 HEAP 스프레이를 사용합니다...

defcon_27_windbg_workshop

"WinDbg Preview를 활용한 모던 디버깅" DEFCON 27 워크숍 이 저장소는 DEFCON 27 워크숍 자료를 포함하고 있습니다. 개요 요약 2019년인데도 여전히 너무 많은 Windows 개발자와 해커들이 Windows 바이너리 디버깅을 위해 유용하지만 다소 구식 도구OllyDbg, Immunity Debugger에 의존하고 있습니다. 그들은 Microsoft의 최신 WinDbg Preview 에디션에 포함된 매우 귀중한 도구와 기능을 놓치고 있다는 사실을 깨닫지 못하고 있습니다. 이 실습 중심 워크숍은 WinDb...

yara-ttd

yara-ttd - 궁극의 패커 천적 Time Travel Debugging 트레이스에서 YARA 규칙 사용 1. 데모 2. 동기 3. 설치 4. 사용법 5. 향후 기능 데모 UPX로 패킹된 바이너리 calc.exe를 실행하는 간단한 바이너리로, UPX로 패킹되어 있습니다. yara-ttd 는 스레드 생성 중 모듈 메모리에서 calc.exe 문자열을 찾습니다. calc.exe를 실행하는 간단한 난독화된 셸코드 테스트한 바이너리는 셸코드를 복호화한 후 새 스레드에서 실행합니다. yara-ttd 는...

@toolspack/ttd-common (>=0.1.0, <=1.3.2), @toolspack/ttd-pdfjs (>=0.0.0, <=0.1.4) potentially affected by unknown CVE via babel-laoder (0.0.1-security)

babel-laoder NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on babel-laoder and may be impacted: - @toolspack/ttd-common =0.1.0, =0.0.0, =0.1.4 Source cves: unknown CVE Source advisory: OSV:MAL-2025-15281...

MAL-2025-4030 Malicious code in ttd-lithium (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 73c711048944c634cd49e0952d573c5c48f00dd01c409ae7ddb3848ae960a6fb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ttd-lithium (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 73c711048944c634cd49e0952d573c5c48f00dd01c409ae7ddb3848ae960a6fb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

SUSE CVE-2008-3577

Buffer overflow in src/openttd.cpp in OpenTTD before 0.6.2 allows local users to execute arbitrary code via a large filename supplied to the "-g" parameter in the ttdmain function. NOTE: it is unlikely that this issue would cross privilege boundaries in typical environments...

@toolspack/ttd-common (>=0.1.0, <=1.3.2), @toolspack/ttd-pdfjs (>=0.0.0, <=0.1.4) potentially affected by unknown CVE via babel-laoder (0.0.1-security)

babel-laoder NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on babel-laoder and may be impacted: - @toolspack/ttd-common =0.1.0, =0.0.0, =0.1.4 Source cves: unknown CVE Source advisory: OSV:GHSA-QP6M-JQFR-2F7V...

chakra: Crash in bool TTD::MarkTable::MarkAndTestAddr<

Project: https://github.com/Microsoft/ChakraCore.git Detailed report: https://oss-fuzz.com/testcase?key=5714440556118016 Project: chakra Fuzzer: jsfuzzer Job Type: asanchakra Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x556b0f9f8970 Crash State: bool TTD::MarkTable::MarkAndTestAdd...