Code
Hub
Workspaces
Following
Trending
Connect
MCP
copy
Create free account
hub
/
github.com/SecWiki/windows-kernel-exploits
/ functions
Functions
1,453 in github.com/SecWiki/windows-kernel-exploits
⨍
Functions
1,453
◇
Types & classes
240
Method
BAD
(self)
win-exp-suggester/windows-exploit-suggester.py:1611
Function
BEA_UNUSED_ARG
MS12-042/sysret-source/junk/sources/include/beaengine/macros.h:27
Function
BeaEngine
MS12-042/sysret-source/junk/sources/beaengineSources/BeaEngine.c:56
Function
BuildAuthChallenge
int NtlmChallengeSize(tSmbNtlmAuthChallenge *Challenge){ return( sizeof(tSmbNtlmAuthChallenge) - sizeof(Challenge->buffer) +Challenge->uDomain.maxlen
MS08-068/src/ntlm.cpp:1442
Method
CMarshaller
CVE-2017-0213/CVE-2017-0213.cpp:88
Method
CoInit
CVE-2017-0213/CVE-2017-0213.cpp:529
Method
CreateProcessAsUser
( IntPtr hToken, string lpApplicationName, string lpCommandLine, IntPtr lpProcessA
MS16-111/40429.cs:395
Function
D8_
==================================================================== * * ==================================================================== */
MS12-042/sysret-source/junk/sources/beaengineSources/Includes/instr_set/opcodes_FPU.c:22
Function
D9_
==================================================================== * * ==================================================================== */
MS12-042/sysret-source/junk/sources/beaengineSources/Includes/instr_set/opcodes_FPU.c:219
Function
DA_
==================================================================== * * ==================================================================== */
MS12-042/sysret-source/junk/sources/beaengineSources/Includes/instr_set/opcodes_FPU.c:600
Function
DB_
==================================================================== * * ==================================================================== */
MS12-042/sysret-source/junk/sources/beaengineSources/Includes/instr_set/opcodes_FPU.c:773
Function
DC_
==================================================================== * * ==================================================================== */
MS12-042/sysret-source/junk/sources/beaengineSources/Includes/instr_set/opcodes_FPU.c:995
Function
DD_
==================================================================== * * ==================================================================== */
MS12-042/sysret-source/junk/sources/beaengineSources/Includes/instr_set/opcodes_FPU.c:1203
Function
DE_
==================================================================== * * ==================================================================== */
MS12-042/sysret-source/junk/sources/beaengineSources/Includes/instr_set/opcodes_FPU.c:1376
Function
DF_
==================================================================== * * ==================================================================== */
MS12-042/sysret-source/junk/sources/beaengineSources/Includes/instr_set/opcodes_FPU.c:1584
Function
D_P16
MS08-068/src/ntlm.cpp:727
Method
DisconnectObject
CVE-2017-0213/CVE-2017-0213.cpp:215
Method
Dispose
()
MS16-111/40429.cs:116
Method
DoExploit
()
MS16-111/40429.cs:429
Method
DuplicateToken
(SafeKernelObjectHandle existing_token)
MS16-111/40429.cs:298
Method
EXP
(self)
win-exp-suggester/windows-exploit-suggester.py:1627
Function
E_old_pw_hash
MS08-068/src/ntlm.cpp:733
Function
Esc_2byte
==================================================================== * Escape Prefix 0Fh-two bytes opcodes * ================================
MS12-042/sysret-source/junk/sources/beaengineSources/Includes/instr_set/opcodes_prefixes.c:212
Function
Esc_tableA4
==================================================================== * Escape Prefix 0F38h-three bytes opcodes * ============================
MS12-042/sysret-source/junk/sources/beaengineSources/Includes/instr_set/opcodes_prefixes.c:223
Function
Esc_tableA5
==================================================================== * Escape Prefix 0F3Ah-three bytes opcodes * ============================
MS12-042/sysret-source/junk/sources/beaengineSources/Includes/instr_set/opcodes_prefixes.c:233
Function
F
MS08-068/src/ntlm.cpp:306
Method
FakeObject
Constructor, Destructor
CVE-2017-0213/CVE-2017-0213.cpp:231
Method
FileTransferred
CVE-2017-0213/CVE-2017-0213.cpp:316
Method
FormatMessage
( FormatFlags dwFlags, IntPtr lpSource, int dwMessageId, int dwLanguageId,
MS16-111/40429.cs:170
Method
FreeStruct
(ref IntPtr p, Type struct_type)
MS16-111/40429.cs:99
Function
G
MS08-068/src/ntlm.cpp:311
Function
G12_
==================================================================== * * ==================================================================== */
MS12-042/sysret-source/junk/sources/beaengineSources/Includes/instr_set/opcodes_Grp12.c:22
Function
G13_
==================================================================== * * ==================================================================== */
MS12-042/sysret-source/junk/sources/beaengineSources/Includes/instr_set/opcodes_Grp13.c:22
Function
G14_
==================================================================== * * ==================================================================== */
MS12-042/sysret-source/junk/sources/beaengineSources/Includes/instr_set/opcodes_Grp14.c:22
Function
G15_
==================================================================== * * ==================================================================== */
MS12-042/sysret-source/junk/sources/beaengineSources/Includes/instr_set/opcodes_Grp15.c:22
Function
G16_
==================================================================== * * ==================================================================== */
MS12-042/sysret-source/junk/sources/beaengineSources/Includes/instr_set/opcodes_Grp16.c:22
Function
G1_EbIb2
==================================================================== * 82h * ================================================================
MS12-042/sysret-source/junk/sources/beaengineSources/Includes/instr_set/opcodes_Grp1.c:111
Function
G1_EvIb
==================================================================== * 83h * ================================================================
MS12-042/sysret-source/junk/sources/beaengineSources/Includes/instr_set/opcodes_Grp1.c:213
Function
G1_EvIv
==================================================================== * 81h * ================================================================
MS12-042/sysret-source/junk/sources/beaengineSources/Includes/instr_set/opcodes_Grp1.c:124
Function
G2_Eb1
==================================================================== * 0d0h * ===============================================================
MS12-042/sysret-source/junk/sources/beaengineSources/Includes/instr_set/opcodes_Grp2.c:153
Function
G2_EbCL
==================================================================== * 0d2h * ===============================================================
MS12-042/sysret-source/junk/sources/beaengineSources/Includes/instr_set/opcodes_Grp2.c:311
Function
G2_EbIb
==================================================================== * 0c0h * ===============================================================
MS12-042/sysret-source/junk/sources/beaengineSources/Includes/instr_set/opcodes_Grp2.c:22
Function
G2_Ev1
==================================================================== * 0d1h * ===============================================================
MS12-042/sysret-source/junk/sources/beaengineSources/Includes/instr_set/opcodes_Grp2.c:229
Function
G2_EvCL
==================================================================== * 0d3h * ===============================================================
MS12-042/sysret-source/junk/sources/beaengineSources/Includes/instr_set/opcodes_Grp2.c:386
Function
G2_EvIb
==================================================================== * 0c1h * ===============================================================
MS12-042/sysret-source/junk/sources/beaengineSources/Includes/instr_set/opcodes_Grp2.c:88
Function
G3_Eb
==================================================================== * 0f6h * ===============================================================
MS12-042/sysret-source/junk/sources/beaengineSources/Includes/instr_set/opcodes_Grp3.c:22
Function
G3_Ev
==================================================================== * 0f7h * ===============================================================
MS12-042/sysret-source/junk/sources/beaengineSources/Includes/instr_set/opcodes_Grp3.c:125
Function
G4_Eb
==================================================================== * 0feh * ===============================================================
MS12-042/sysret-source/junk/sources/beaengineSources/Includes/instr_set/opcodes_Grp4.c:22
Function
G5_Ev
==================================================================== * 0ffh * ===============================================================
MS12-042/sysret-source/junk/sources/beaengineSources/Includes/instr_set/opcodes_Grp5.c:22
Function
G6_
==================================================================== * 0f00h * ==============================================================
MS12-042/sysret-source/junk/sources/beaengineSources/Includes/instr_set/opcodes_Grp6.c:22
Function
G7_
==================================================================== * 0f01h * ==============================================================
MS12-042/sysret-source/junk/sources/beaengineSources/Includes/instr_set/opcodes_Grp7.c:22
Function
G8_EvIb
==================================================================== * 0fbah * ==============================================================
MS12-042/sysret-source/junk/sources/beaengineSources/Includes/instr_set/opcodes_Grp8.c:22
Function
G9_
==================================================================== * 0fc7h * ==============================================================
MS12-042/sysret-source/junk/sources/beaengineSources/Includes/instr_set/opcodes_Grp9.c:23
Method
GOOD
(self)
win-exp-suggester/windows-exploit-suggester.py:1619
Method
GetClassID
CVE-2017-0213/CVE-2017-0213.cpp:324
Function
GetDriverImageBase
MS12-042/sysret-source/junk/krnlutils.cpp:5
Method
GetEvents
()
MS16-111/40429.cs:335
Method
GetMarshalSizeMax
CVE-2017-0213/CVE-2017-0213.cpp:153
Method
GetModuleHandle
(string modulename)
MS16-111/40429.cs:158
Function
GetSystemDevice
CVE-2017-0213/CVE-2017-0213.cpp:462
Method
GetUnmarshalClass
CVE-2017-0213/CVE-2017-0213.cpp:135
Function
Get__Win32ClientInfo
MS15-061/ms15-061.cpp:58
Function
H
MS08-068/src/ntlm.cpp:316
Function
HookCallback
MS14-058/Exploit/Exploit/Exploit.cpp:18
Function
HookCallback
MS14-058/Trigger/Trigger/Trigger.cpp:15
Function
HookCallbackTwo
Destroys the menu and then returns -5, this will be passed to xxxSendMessage which will then use it as a pointer.
MS14-058/Exploit/Exploit/Exploit.cpp:11
Function
HookCallbackTwo
Destroys the menu and then returns -5, this will be passed to xxxSendMessage which will then use it as a pointer.
MS14-058/Trigger/Trigger/Trigger.cpp:8
Method
JobError
CVE-2017-0213/CVE-2017-0213.cpp:298
Method
JobModification
CVE-2017-0213/CVE-2017-0213.cpp:307
Method
JobTransferred
CVE-2017-0213/CVE-2017-0213.cpp:291
Method
LocalFree
(IntPtr p)
MS16-111/40429.cs:181
Method
LockWorkStation
()
MS16-111/40429.cs:426
Method
MSF
(self)
win-exp-suggester/windows-exploit-suggester.py:1623
Method
Main
(string[] args)
MS16-111/40429.cs:469
Method
MarshalInterface
CVE-2017-0213/CVE-2017-0213.cpp:171
Function
MyMenuProc
MS15-097/exp/_CVE_2015_2546_exp.cpp:365
Function
MyWndProc
MS15-097/exp/_CVE_2015_2546_exp.cpp:344
Method
NORMAL
(self)
win-exp-suggester/windows-exploit-suggester.py:1615
Function
NTLMSSPOWFencrypt
Does the des encryption from the FIRST 8 BYTES of the NT or LM MD4 hash. */
MS08-068/src/ntlm.cpp:1015
Function
NewWndProc
MS15-097/exp/_CVE_2015_2546_exp.cpp:411
Method
NtClose
(IntPtr handle)
MS16-111/40429.cs:246
Method
NtDuplicateToken
( IntPtr ExistingTokenHandle, GenericAccessRights DesiredAccess, ObjectAttributes ObjectAttribu
MS16-111/40429.cs:288
Method
NtException
(int status)
MS16-111/40429.cs:205
Method
NtLoadKeyEx
(ObjectAttributes DestinationName, ObjectAttributes FileName, LoadKeyFlags Flags, IntPtr TrustKeyHand
MS16-111/40429.cs:218
Method
NtOpenProcessTokenEx
( IntPtr ProcessHandle, GenericAccessRights DesiredAccess, AttributeFlags Han
MS16-111/40429.cs:249
Method
NtSetInformationToken
( SafeKernelObjectHandle TokenHandle, TokenInformationClass TokenInformationClass, byte[]
MS16-111/40429.cs:321
Method
ObjectAttributes
(string object_name)
MS16-111/40429.cs:106
Method
OpenProcessToken
()
MS16-111/40429.cs:310
Function
PrefAdSize
==================================================================== * Legacy Prefix 67h-Group 4 * ==========================================
MS12-042/sysret-source/junk/sources/beaengineSources/Includes/instr_set/opcodes_prefixes.c:184
Function
PrefLock
==================================================================== * Legacy Prefix F0h-Group 1 * ==========================================
MS12-042/sysret-source/junk/sources/beaengineSources/Includes/instr_set/opcodes_prefixes.c:22
Function
PrefOpSize
==================================================================== * Legacy Prefix 66h-Group 3 * ==========================================
MS12-042/sysret-source/junk/sources/beaengineSources/Includes/instr_set/opcodes_prefixes.c:155
Function
PrefREPE
==================================================================== * Legacy Prefix F3h-Group 1 * ==========================================
MS12-042/sysret-source/junk/sources/beaengineSources/Includes/instr_set/opcodes_prefixes.c:53
Function
PrefREPNE
==================================================================== * Legacy Prefix F2h-Group 1 * ==========================================
MS12-042/sysret-source/junk/sources/beaengineSources/Includes/instr_set/opcodes_prefixes.c:37
Function
PrefSEGCS
==================================================================== * Legacy Prefix 2Eh-Group 2 * ==========================================
MS12-042/sysret-source/junk/sources/beaengineSources/Includes/instr_set/opcodes_prefixes.c:69
Function
PrefSEGDS
==================================================================== * Legacy Prefix 3Eh-Group 2 * ==========================================
MS12-042/sysret-source/junk/sources/beaengineSources/Includes/instr_set/opcodes_prefixes.c:83
Function
PrefSEGES
==================================================================== * Legacy Prefix 26h-Group 2 * ==========================================
MS12-042/sysret-source/junk/sources/beaengineSources/Includes/instr_set/opcodes_prefixes.c:97
Function
PrefSEGFS
==================================================================== * Legacy Prefix 64h-Group 2 * ==========================================
MS12-042/sysret-source/junk/sources/beaengineSources/Includes/instr_set/opcodes_prefixes.c:111
Function
PrefSEGGS
==================================================================== * Legacy Prefix 65h-Group 2 * ==========================================
MS12-042/sysret-source/junk/sources/beaengineSources/Includes/instr_set/opcodes_prefixes.c:126
Function
PrefSEGSS
==================================================================== * Legacy Prefix 36h-Group 2 * ==========================================
MS12-042/sysret-source/junk/sources/beaengineSources/Includes/instr_set/opcodes_prefixes.c:141
Method
QueryInterface
CVE-2017-0213/CVE-2017-0213.cpp:93
← previous
next →
401–500 of 1,453, ranked by callers