Skip to content

Instantly share code, notes, and snippets.

View poxyran's full-sized avatar

poxyran

  • Palermo Lakes
View GitHub Profile
@poxyran
poxyran / steal_token_windows_x64.txt
Created August 21, 2019 20:01
Overwriting process token using Windbg
On Guest VM:
C:\Users\Administrator>whoami
win-2v2jfp9h9ts\administrator
On Windbg (Host VM):
dt nt!_EPROCESS
+0x358 Token : _EX_FAST_REF
@poxyran
poxyran / gist:7b997f7cce6ba52d7736e87b62d0b48b
Created October 4, 2018 18:46
Unlocking BT 2Wire 2700HGV Business Hub (wireless router)
http://bt2700hgv.tripod.com/ir1002700HGV.htm
Start GDB and execute the following commands:
catch syscall ptrace
commands 1
set ($eax) = 0
continue
end
Then, run the app and voilá! you can debug your program :)