• Welcome to the world's largest Chinese hacker forum

    Welcome to the world's largest Chinese hacker forum, our forum registration is open! You can now register for technical communication with us, this is a free and open to the world of the BBS, we founded the purpose for the study of network security, please don't release business of black/grey, or on the BBS posts, to seek help hacker if violations, we will permanently frozen your IP and account, thank you for your cooperation. Hacker attack and defense cracking or network Security

    business please click here: Creation Security  From CNHACKTEAM

Windows内核-信息泄露漏洞


This Wind

Recommended Posts

发布内容作者:Bitdefender                                              漏洞危害等级:critlow_2.gif〔中等〕

 

CVE:
<font style="vertical-align: inherit;"><font style="vertical-align: inherit;">#SWAPGS攻击的PoC([CVE-2019-1125](https://nvd.nist.gov/vuln/detail/CVE-2019-1125))</font></font><font></font>
<font></font><font style="vertical-align: inherit;"><font style="vertical-align: inherit;">
这包含了在2019年美国黑帽大会上公开展示的SWAPGS攻击PoC的来源。</font></font><font></font>
<font></font><font style="vertical-align: inherit;"><font style="vertical-align: inherit;">
##目录</font></font><font></font>
<font></font><font style="vertical-align: inherit;"><font style="vertical-align: inherit;">
* leaggsbkva-变体1(在内核内存中查找随机值;仅限于PE内核映像头)</font></font><font></font><font style="vertical-align: inherit;"><font style="vertical-align: inherit;">
* dropgsbkvat-变体2(从内核内存中提取随机值;仅限于PE内核映像头)</font></font><font></font><font style="vertical-align: inherit;"><font style="vertical-align: inherit;">
*白皮书</font></font><font></font><font style="vertical-align: inherit;"><font style="vertical-align: inherit;">
* Black Hat USA 2019演讲</font></font><font></font>
<font></font><font style="vertical-align: inherit;"><font style="vertical-align: inherit;">
##先决条件</font></font><font></font>
<font></font><font style="vertical-align: inherit;"><font style="vertical-align: inherit;">
1. Visual Studio 2015</font></font><font></font><font style="vertical-align: inherit;"><font style="vertical-align: inherit;">
2.未修补的Windows x64(7或更高版本)</font></font><font></font>
<font></font><font style="vertical-align: inherit;"><font style="vertical-align: inherit;">
##作者</font></font><font></font>
<font></font><font style="vertical-align: inherit;"><font style="vertical-align: inherit;">
*安德烈·弗拉德·鲁阿</font></font><font></font><font style="vertical-align: inherit;"><font style="vertical-align: inherit;">
*丹·霍里亚(Dan Horea)</font></font><font></font>
<font></font><font style="vertical-align: inherit;"><font style="vertical-align: inherit;">
##其他资源</font></font><font></font>
<font></font><font style="vertical-align: inherit;"><font style="vertical-align: inherit;">
[在美国黑帽大会上的演示文稿的视频录制,2019年](https://www.youtube.com/watch?v=uBPry7jcfBE)</font></font><font></font>
<font></font>
<font></font><font style="vertical-align: inherit;"><font style="vertical-align: inherit;">
下载〜https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/48071.zip</font></font><font></font>
<font></font><font style="vertical-align: inherit;"><font style="vertical-align: inherit;">
#0day.today [2020-03-20]#</font></font>

 

Link to comment
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now