0vercl0k

rp++ is a fast C++ ROP gadget finder for PE/ELF/Mach-O x86/x64/ARM/ARM64 binaries.

wtf is a distributed, code-coverage guided, customizable, cross-platform snapshot-based fuzzer designed for attacking user and / or kernel-mode targets running on Microsoft Windows and Linux...

Proof of concept for CVE-2021-31166, a remote HTTP.sys use-after-free triggered remotely.

Full exploit chain (CVE-2019-11708 & CVE-2019-9810) against Firefox on Windows 64-bit.

Basically a script thrift shop

A bunch of JavaScript extensions for WinDbg.

Visualize the virtual address space of a Windows process on a Hilbert curve.

PoC for CVE-2022-21971 "Windows Runtime Remote Code Execution Vulnerability"

A repository to store Z3-python scripts you can use as examples, reminders, whatever.

A Cross-Platform C++ parser library for Windows user minidumps with Python 3 bindings.

Proof of concept for CVE-2021-24086, a NULL dereference in tcpip.sys triggered remotely.

Exploit for CVE-2019-9810 Firefox on Windows 64-bit.

PoC for CVE-2021-28476 a guest-to-host "Hyper-V Remote Code Execution Vulnerability" in vmswitch.sys.

A Windows kernel dump C++ parser library with Python 3 bindings.

Blazefox exploits for Windows 10 RS5 64-bit.

WinDbg extension written in Rust to dump the CPU / memory state of a running VM

Enumerate user mode shared memory mappings on Windows.

A fast execution trace symbolizer for Windows.

Zenith exploits a memory corruption vulnerability in the NetUSB driver to get remote-code execution on the TP-Link Archer C7 V5 router for Pwn2Own Austin 2021.

rp-bf: A library to bruteforce ROP gadgets by emulating a Windows user-mode crash-dump

Scripting OllyDBG2 using Python is now possible!

A fast execution trace symbolizer for Windows that runs on all major platforms and doesn't depend on any Microsoft libraries.

Paracosme is a zero-click remote memory corruption exploit that compromises ICONICS Genesis64 which was demonstrated successfully on stage during the Pwn2Own Miami 2022 competition.

Repository of the findings found by wtf when fuzzing IDA75.

Python bindings for the Microsoft Hypervisor Platform APIs.

This utility allows you to lock every available memory regions of an arbitrary process into its working set.

PoC for CVE-2022-28281 a Mozilla Firefox Out of bounds write.

Writeups, PoCs of the bugs I found while preparing for the Pwn2Own Miami 2023 contest targeting UaGateway from the OPC UA Server category.

PoC for CVE-2022-21974 "Roaming Security Rights Management Services Remote Code Execution Vulnerability"

PoC for CVE-2021-32537: an out-of-bounds memory access that leads to pool corruption in the Windows kernel.

A KISS Rust crate to parse Windows kernel crash-dumps created by Windows & its debugger.