Discover 0vercl0k/pywinhv Open Source project

This repository has been archived on 27/Dec/2023
Stars
66
Rank 468,167 (Top 10 %)
Language
Python
License
MIT License
Created almost 6 years ago
Updated over 5 years ago

0vercl0k

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Python bindings for the Microsoft Hypervisor Platform APIs.

rp++ is a fast C++ ROP gadget finder for PE/ELF/Mach-O x86/x64/ARM/ARM64 binaries.

C++

1,804

wtf

wtf is a distributed, code-coverage guided, customizable, cross-platform snapshot-based fuzzer designed for attacking user and / or kernel-mode targets running on Microsoft Windows and Linux user-mode (experimental!).

C++

1,472

CVE-2021-31166

Proof of concept for CVE-2021-31166, a remote HTTP.sys use-after-free triggered remotely.

Python

824

CVE-2019-11708

Full exploit chain (CVE-2019-11708 & CVE-2019-9810) against Firefox on Windows 64-bit.

JavaScript

617

stuffz

Basically a script thrift shop

589

windbg-scripts

A bunch of JavaScript extensions for WinDbg.

JavaScript

315

CVE-2022-21971

PoC for CVE-2022-21971 "Windows Runtime Remote Code Execution Vulnerability"

Rich Text Format

306

clairvoyance

Visualize the virtual address space of a Windows process on a Hilbert curve.

C++

294

z3-playground

A repository to store Z3-python scripts you can use as examples, reminders, whatever.

Python

273

CVE-2021-24086

Proof of concept for CVE-2021-24086, a NULL dereference in tcpip.sys triggered remotely.

Python

232

CVE-2019-9810

Exploit for CVE-2019-9810 Firefox on Windows 64-bit.

JavaScript

228

CVE-2021-28476

PoC for CVE-2021-28476 a guest-to-host "Hyper-V Remote Code Execution Vulnerability" in vmswitch.sys.

217

udmp-parser

A Cross-Platform C++ parser library for Windows user minidumps with Python 3 bindings.

C++

193

kdmp-parser

A Windows kernel dump C++ parser library with Python 3 bindings.

C++

193

blazefox

Blazefox exploits for Windows 10 RS5 64-bit.

C++

148

symbolizer

A fast execution trace symbolizer for Windows.

C++

130

zenith

Zenith exploits a memory corruption vulnerability in the NetUSB driver to get remote-code execution on the TP-Link Archer C7 V5 router for Pwn2Own Austin 2021.

Python

121

sic

Enumerate user mode shared memory mappings on Windows.

114

ollydbg2-python

Scripting OllyDBG2 using Python is now possible!

C++

110

snapshot

WinDbg extension written in Rust to dump the CPU / memory state of a running VM

Rust

110

rp-bf.rs

rp-bf: A library to bruteforce ROP gadgets by emulating a Windows user-mode crash-dump

Rust

110

fuzzing-ida75

Repository of the findings found by wtf when fuzzing IDA75.

paracosme

Paracosme is a zero-click remote memory corruption exploit that compromises ICONICS Genesis64 which was demonstrated successfully on stage during the Pwn2Own Miami 2022 competition.

Python

symbolizer-rs

A fast execution trace symbolizer for Windows that runs on all major platforms and doesn't depend on any Microsoft libraries.

Rust

CVE-2022-28281

PoC for CVE-2022-28281 a Mozilla Firefox Out of bounds write.

HTML

lockmem

This utility allows you to lock every available memory regions of an arbitrary process into its working set.

C++

CVE-2022-21974

PoC for CVE-2022-21974 "Roaming Security Rights Management Services Remote Code Execution Vulnerability"

Rich Text Format

pwn2own2023-miami

Writeups, PoCs of the bugs I found while preparing for the Pwn2Own Miami 2023 contest targeting UaGateway from the OPC UA Server category.

C++

CVE-2021-32537

PoC for CVE-2021-32537: an out-of-bounds memory access that leads to pool corruption in the Windows kernel.

C++

j0llyDmpr

j0llydmper is a windows service that allows you to dump furtively and automaticaly some contents of USB disks just plugged in your computer. In order to dump potentialy interesting files, you can use a rule on the file name or/and on the file size.

udmp-parser-rs

A Rust crate for parsing Windows user minidumps.

Rust

inject

Yet another Windows DLL injector.

C++

kdmp-parser-rs

A KISS Rust crate to parse Windows kernel crash-dumps created by Windows & its debugger.

Rust

KEPaboo

Neutralize KEPServerEX anti-debugging techniques

C++

longue-vue

Longue vue is an exploit chain that can compromise over the internet NETGEAR DGND3700v2 devices.

JavaScript

TV-Show-Downloader

Maybe you're a guy a bit like me -- who watch a lot of series -- so I guess you already know that downloading the latest episodes of all your favorites TV Shows is absolutely PAINFUL. I mean it, really. Thus, TVShow Downloader is a set of basic scripts (crontab + python script + bash script) designed to simplify my whole existence on this earth: I haven't to think about downloading my serie anymore \o/.

Python

teesee-calc

Visualize and compare total compensation (TC) packages over time.

HTML

dbgeng-rs

Rust binding for the dbgeng COM interfaces.

Rust

articles

Mirror of the different PDF articles I wrote

0vercl0k

gflags-rs

Utility that lets you interact with Microsoft Windows Global Flags and particularly PageHeap, made to learn Rust

Rust

addr-symbolizer-rs

A KISS Rust crate to symbolize function addresses using Windows PDB files

Rust

rp2s

result

Simple, tiny and readable implementation of a Rust like std::result type for C++.

0vercl0k/pywinhv

0vercl0k

Reviews

Repository Details

More Repositories