GV

GeezerVison

The World Wide Web, restored to 800 pixels of glory.

Home|About|Gaming cabinet|Archives|How it works|Starter sites

On this site

  • Sign in
  • ActionsCI/CD and automation
  • CodespacesCloud development environments
  • All Features
  • Documentation
  • Training
  • Certifications
  • Build with Copilot
  • Customize Copilot
  • Integrations
  • Trending repos
  • GitHub Sponsors
  • Developer articles
  • Enterprises

This view

  • Original page
  • New address

GeezerVison is showing github.com โ€” 0vercl0k - Overview

@0vercl0k 0vercl0k Follow
More
  • Overview
  • Repositories
  • Projects
  • Packages
  • Stars
@0vercl0k
0vercl0k
Follow
View 0vercl0k's full-sized avatar

Axel Souchet 0vercl0k

Follow
Sponsor
2.5k followers ยท 0 following
  • US/FR
  • https://doar-e.github.io/
  • @0vercl0k

Achievements

Achievement: QuickdrawAchievement: Pair ExtraordinaireAchievement: Pull Sharkx3Achievement: Arctic Code Vault ContributorAchievement: Starstruckx3

Achievements

Achievement: QuickdrawAchievement: Pair ExtraordinaireAchievement: Pull Sharkx3Achievement: Arctic Code Vault ContributorAchievement: Starstruckx3

Organizations

@doar-e
More
  • Overview
  • Repositories
  • Projects
  • Packages
  • Stars
0vercl0k/README.md

Hello, world ๐Ÿ‘‹

If you made it all the way here, you might as well check out some of my projects and where I blog ๐Ÿ˜Š. Oh, and if you want to say hi, come hangout on the Diary of a reverse-engineer's discord: invite!

Windows related

  • wtf: A distributed, code-coverage guided, customizable, cross-platform snapshot-based fuzzer designed for attacking user and / or kernel-mode targets running on Microsoft Windows,
  • windbg-scripts: A collection of JavaScript debugger extensions for WinDbg,
  • kdmp-parser / udmp-parser: C++ libraries to parse Windows kernel and usermode dumps (udmp-parser-rs / kdmp-parser-rs for Rust crates),
  • ๐Ÿ”ฎ clairvoyance: Visualize the virtual address space of a Windows process on a Hilbert curve,
  • symbolizer-rs: A fast execution trace symbolizer for Windows that runs on all major platforms and doesn't depend on any Microsoft libraries,
  • SiC: Enumerate user mode shared memory mappings on Windows,
  • KEPaboo: Neutralize KEPServerEX anti-debugging techniques,
  • rp-bf.rs: A library to bruteforce ROP gadgets by emulating a Windows user-mode crash-dump,
  • Various CVE PoCs for tcpip.sys (CVE-2021-24086), http.sys (CVE-2021-31166), Hyper-V (CVE-2021-28476), Realtek's RTKVHD64.sys driver (CVE-2021-32537) and the Mozilla browser (CVE-2022-28281),
  • Modern Debugging with WinDbg Preview: Workshop that @hugsy and I ran during Defcon 27.

Exploitation

  • Paracosme: Zero-click remote memory corruption exploit that compromises ICONICS Genesis64 (Pwn2Own Miami 2022),
  • Longue vue: Over-the-web remote compromise exploit chain for NETGEAR DGND3700v2 devices,
  • Zenith: Remote kernel exploit for the TP-Link AC1750 Smart Wi-Fi Router (Pwn2Own Austin 2021),
  • Pwn2Own Miami 2023: Writeups/PoCs for bugs I found while preparing for Pwn2Own Miami 2023 targeting UaGateway in the OPC UA Server category,
  • CVE-2019-11708: Full chain for CVE-2019-11708 & CVE-2019-9810,
  • CVE-2019-9810: RCE exploit for Firefox on Windows.

Misc

  • rp: A fast C++ ROP gadget finder for PE/ELF/Mach-O x86/x64/ARM binaries,
  • z3-playground: A bunch of Z3-python scripts that can be used as examples, reminders, etc.
  • Theorem prover, symbolic execution and practical reverse-engineering: Presentation I gave in Lille, France in 2015,
  • teesee-calc: A simple web application that allows you to visualize and compare total compensation packages.

Popular repositories Loading

  1. rp rp Public

    rp++ is a fast C++ ROP gadget finder for PE/ELF/Mach-O x86/x64/ARM/ARM64 binaries.

    C++ 2.2k 275

  2. wtf wtf Public

    wtf is a distributed, code-coverage guided, customizable, cross-platform snapshot-based fuzzer designed for attacking user and / or kernel-mode targets running on Microsoft Windows and Linux user-mโ€ฆ

    C++ 1.8k 157

  3. CVE-2021-31166 CVE-2021-31166 Public archive

    Proof of concept for CVE-2021-31166, a remote HTTP.sys use-after-free triggered remotely.

    Python 822 135

  4. CVE-2019-11708 CVE-2019-11708 Public archive

    Full exploit chain (CVE-2019-11708 & CVE-2019-9810) against Firefox on Windows 64-bit.

    JavaScript 626 79

  5. stuffz stuffz Public archive

    Basically a script thrift shop

    C 591 125

  6. windbg-scripts windbg-scripts Public

    A bunch of JavaScript extensions for WinDbg.

    JavaScript 368 47

Something went wrong, please refresh the page to try again.
If the problem persists, check the GitHub status page or contact support.

Uh oh!

There was an error while loading. Please reload this page.

You are visitor 01402503 โ€” GeezerVison does not store the pages you look up.
Best viewed with Netscape Navigator 4.7 or Internet Explorer 6 at 800ร—600. No cookies required.