MCPcopy Create free account

hub / github.com/SecWiki/windows-kernel-exploits / functions

Functions1,453 in github.com/SecWiki/windows-kernel-exploits

MethodBAD
(self)
win-exp-suggester/windows-exploit-suggester.py:1611
FunctionBEA_UNUSED_ARG
MS12-042/sysret-source/junk/sources/include/beaengine/macros.h:27
FunctionBeaEngine
MS12-042/sysret-source/junk/sources/beaengineSources/BeaEngine.c:56
FunctionBuildAuthChallenge
int NtlmChallengeSize(tSmbNtlmAuthChallenge *Challenge){ return( sizeof(tSmbNtlmAuthChallenge) - sizeof(Challenge->buffer) +Challenge->uDomain.maxlen
MS08-068/src/ntlm.cpp:1442
MethodCMarshaller
CVE-2017-0213/CVE-2017-0213.cpp:88
MethodCoInit
CVE-2017-0213/CVE-2017-0213.cpp:529
MethodCreateProcessAsUser
( IntPtr hToken, string lpApplicationName, string lpCommandLine, IntPtr lpProcessA
MS16-111/40429.cs:395
FunctionD8_
==================================================================== * * ==================================================================== */
MS12-042/sysret-source/junk/sources/beaengineSources/Includes/instr_set/opcodes_FPU.c:22
FunctionD9_
==================================================================== * * ==================================================================== */
MS12-042/sysret-source/junk/sources/beaengineSources/Includes/instr_set/opcodes_FPU.c:219
FunctionDA_
==================================================================== * * ==================================================================== */
MS12-042/sysret-source/junk/sources/beaengineSources/Includes/instr_set/opcodes_FPU.c:600
FunctionDB_
==================================================================== * * ==================================================================== */
MS12-042/sysret-source/junk/sources/beaengineSources/Includes/instr_set/opcodes_FPU.c:773
FunctionDC_
==================================================================== * * ==================================================================== */
MS12-042/sysret-source/junk/sources/beaengineSources/Includes/instr_set/opcodes_FPU.c:995
FunctionDD_
==================================================================== * * ==================================================================== */
MS12-042/sysret-source/junk/sources/beaengineSources/Includes/instr_set/opcodes_FPU.c:1203
FunctionDE_
==================================================================== * * ==================================================================== */
MS12-042/sysret-source/junk/sources/beaengineSources/Includes/instr_set/opcodes_FPU.c:1376
FunctionDF_
==================================================================== * * ==================================================================== */
MS12-042/sysret-source/junk/sources/beaengineSources/Includes/instr_set/opcodes_FPU.c:1584
FunctionD_P16
MS08-068/src/ntlm.cpp:727
MethodDisconnectObject
CVE-2017-0213/CVE-2017-0213.cpp:215
MethodDispose
()
MS16-111/40429.cs:116
MethodDoExploit
()
MS16-111/40429.cs:429
MethodDuplicateToken
(SafeKernelObjectHandle existing_token)
MS16-111/40429.cs:298
MethodEXP
(self)
win-exp-suggester/windows-exploit-suggester.py:1627
FunctionE_old_pw_hash
MS08-068/src/ntlm.cpp:733
FunctionEsc_2byte
==================================================================== * Escape Prefix 0Fh-two bytes opcodes * ================================
MS12-042/sysret-source/junk/sources/beaengineSources/Includes/instr_set/opcodes_prefixes.c:212
FunctionEsc_tableA4
==================================================================== * Escape Prefix 0F38h-three bytes opcodes * ============================
MS12-042/sysret-source/junk/sources/beaengineSources/Includes/instr_set/opcodes_prefixes.c:223
FunctionEsc_tableA5
==================================================================== * Escape Prefix 0F3Ah-three bytes opcodes * ============================
MS12-042/sysret-source/junk/sources/beaengineSources/Includes/instr_set/opcodes_prefixes.c:233
FunctionF
MS08-068/src/ntlm.cpp:306
MethodFakeObject
Constructor, Destructor
CVE-2017-0213/CVE-2017-0213.cpp:231
MethodFileTransferred
CVE-2017-0213/CVE-2017-0213.cpp:316
MethodFormatMessage
( FormatFlags dwFlags, IntPtr lpSource, int dwMessageId, int dwLanguageId,
MS16-111/40429.cs:170
MethodFreeStruct
(ref IntPtr p, Type struct_type)
MS16-111/40429.cs:99
FunctionG
MS08-068/src/ntlm.cpp:311
FunctionG12_
==================================================================== * * ==================================================================== */
MS12-042/sysret-source/junk/sources/beaengineSources/Includes/instr_set/opcodes_Grp12.c:22
FunctionG13_
==================================================================== * * ==================================================================== */
MS12-042/sysret-source/junk/sources/beaengineSources/Includes/instr_set/opcodes_Grp13.c:22
FunctionG14_
==================================================================== * * ==================================================================== */
MS12-042/sysret-source/junk/sources/beaengineSources/Includes/instr_set/opcodes_Grp14.c:22
FunctionG15_
==================================================================== * * ==================================================================== */
MS12-042/sysret-source/junk/sources/beaengineSources/Includes/instr_set/opcodes_Grp15.c:22
FunctionG16_
==================================================================== * * ==================================================================== */
MS12-042/sysret-source/junk/sources/beaengineSources/Includes/instr_set/opcodes_Grp16.c:22
FunctionG1_EbIb2
==================================================================== * 82h * ================================================================
MS12-042/sysret-source/junk/sources/beaengineSources/Includes/instr_set/opcodes_Grp1.c:111
FunctionG1_EvIb
==================================================================== * 83h * ================================================================
MS12-042/sysret-source/junk/sources/beaengineSources/Includes/instr_set/opcodes_Grp1.c:213
FunctionG1_EvIv
==================================================================== * 81h * ================================================================
MS12-042/sysret-source/junk/sources/beaengineSources/Includes/instr_set/opcodes_Grp1.c:124
FunctionG2_Eb1
==================================================================== * 0d0h * ===============================================================
MS12-042/sysret-source/junk/sources/beaengineSources/Includes/instr_set/opcodes_Grp2.c:153
FunctionG2_EbCL
==================================================================== * 0d2h * ===============================================================
MS12-042/sysret-source/junk/sources/beaengineSources/Includes/instr_set/opcodes_Grp2.c:311
FunctionG2_EbIb
==================================================================== * 0c0h * ===============================================================
MS12-042/sysret-source/junk/sources/beaengineSources/Includes/instr_set/opcodes_Grp2.c:22
FunctionG2_Ev1
==================================================================== * 0d1h * ===============================================================
MS12-042/sysret-source/junk/sources/beaengineSources/Includes/instr_set/opcodes_Grp2.c:229
FunctionG2_EvCL
==================================================================== * 0d3h * ===============================================================
MS12-042/sysret-source/junk/sources/beaengineSources/Includes/instr_set/opcodes_Grp2.c:386
FunctionG2_EvIb
==================================================================== * 0c1h * ===============================================================
MS12-042/sysret-source/junk/sources/beaengineSources/Includes/instr_set/opcodes_Grp2.c:88
FunctionG3_Eb
==================================================================== * 0f6h * ===============================================================
MS12-042/sysret-source/junk/sources/beaengineSources/Includes/instr_set/opcodes_Grp3.c:22
FunctionG3_Ev
==================================================================== * 0f7h * ===============================================================
MS12-042/sysret-source/junk/sources/beaengineSources/Includes/instr_set/opcodes_Grp3.c:125
FunctionG4_Eb
==================================================================== * 0feh * ===============================================================
MS12-042/sysret-source/junk/sources/beaengineSources/Includes/instr_set/opcodes_Grp4.c:22
FunctionG5_Ev
==================================================================== * 0ffh * ===============================================================
MS12-042/sysret-source/junk/sources/beaengineSources/Includes/instr_set/opcodes_Grp5.c:22
FunctionG6_
==================================================================== * 0f00h * ==============================================================
MS12-042/sysret-source/junk/sources/beaengineSources/Includes/instr_set/opcodes_Grp6.c:22
FunctionG7_
==================================================================== * 0f01h * ==============================================================
MS12-042/sysret-source/junk/sources/beaengineSources/Includes/instr_set/opcodes_Grp7.c:22
FunctionG8_EvIb
==================================================================== * 0fbah * ==============================================================
MS12-042/sysret-source/junk/sources/beaengineSources/Includes/instr_set/opcodes_Grp8.c:22
FunctionG9_
==================================================================== * 0fc7h * ==============================================================
MS12-042/sysret-source/junk/sources/beaengineSources/Includes/instr_set/opcodes_Grp9.c:23
MethodGOOD
(self)
win-exp-suggester/windows-exploit-suggester.py:1619
MethodGetClassID
CVE-2017-0213/CVE-2017-0213.cpp:324
FunctionGetDriverImageBase
MS12-042/sysret-source/junk/krnlutils.cpp:5
MethodGetEvents
()
MS16-111/40429.cs:335
MethodGetMarshalSizeMax
CVE-2017-0213/CVE-2017-0213.cpp:153
MethodGetModuleHandle
(string modulename)
MS16-111/40429.cs:158
FunctionGetSystemDevice
CVE-2017-0213/CVE-2017-0213.cpp:462
MethodGetUnmarshalClass
CVE-2017-0213/CVE-2017-0213.cpp:135
FunctionGet__Win32ClientInfo
MS15-061/ms15-061.cpp:58
FunctionH
MS08-068/src/ntlm.cpp:316
FunctionHookCallback
MS14-058/Exploit/Exploit/Exploit.cpp:18
FunctionHookCallback
MS14-058/Trigger/Trigger/Trigger.cpp:15
FunctionHookCallbackTwo
Destroys the menu and then returns -5, this will be passed to xxxSendMessage which will then use it as a pointer.
MS14-058/Exploit/Exploit/Exploit.cpp:11
FunctionHookCallbackTwo
Destroys the menu and then returns -5, this will be passed to xxxSendMessage which will then use it as a pointer.
MS14-058/Trigger/Trigger/Trigger.cpp:8
MethodJobError
CVE-2017-0213/CVE-2017-0213.cpp:298
MethodJobModification
CVE-2017-0213/CVE-2017-0213.cpp:307
MethodJobTransferred
CVE-2017-0213/CVE-2017-0213.cpp:291
MethodLocalFree
(IntPtr p)
MS16-111/40429.cs:181
MethodLockWorkStation
()
MS16-111/40429.cs:426
MethodMSF
(self)
win-exp-suggester/windows-exploit-suggester.py:1623
MethodMain
(string[] args)
MS16-111/40429.cs:469
MethodMarshalInterface
CVE-2017-0213/CVE-2017-0213.cpp:171
FunctionMyMenuProc
MS15-097/exp/_CVE_2015_2546_exp.cpp:365
FunctionMyWndProc
MS15-097/exp/_CVE_2015_2546_exp.cpp:344
MethodNORMAL
(self)
win-exp-suggester/windows-exploit-suggester.py:1615
FunctionNTLMSSPOWFencrypt
Does the des encryption from the FIRST 8 BYTES of the NT or LM MD4 hash. */
MS08-068/src/ntlm.cpp:1015
FunctionNewWndProc
MS15-097/exp/_CVE_2015_2546_exp.cpp:411
MethodNtClose
(IntPtr handle)
MS16-111/40429.cs:246
MethodNtDuplicateToken
( IntPtr ExistingTokenHandle, GenericAccessRights DesiredAccess, ObjectAttributes ObjectAttribu
MS16-111/40429.cs:288
MethodNtException
(int status)
MS16-111/40429.cs:205
MethodNtLoadKeyEx
(ObjectAttributes DestinationName, ObjectAttributes FileName, LoadKeyFlags Flags, IntPtr TrustKeyHand
MS16-111/40429.cs:218
MethodNtOpenProcessTokenEx
( IntPtr ProcessHandle, GenericAccessRights DesiredAccess, AttributeFlags Han
MS16-111/40429.cs:249
MethodNtSetInformationToken
( SafeKernelObjectHandle TokenHandle, TokenInformationClass TokenInformationClass, byte[]
MS16-111/40429.cs:321
MethodObjectAttributes
(string object_name)
MS16-111/40429.cs:106
MethodOpenProcessToken
()
MS16-111/40429.cs:310
FunctionPrefAdSize
==================================================================== * Legacy Prefix 67h-Group 4 * ==========================================
MS12-042/sysret-source/junk/sources/beaengineSources/Includes/instr_set/opcodes_prefixes.c:184
FunctionPrefLock
==================================================================== * Legacy Prefix F0h-Group 1 * ==========================================
MS12-042/sysret-source/junk/sources/beaengineSources/Includes/instr_set/opcodes_prefixes.c:22
FunctionPrefOpSize
==================================================================== * Legacy Prefix 66h-Group 3 * ==========================================
MS12-042/sysret-source/junk/sources/beaengineSources/Includes/instr_set/opcodes_prefixes.c:155
FunctionPrefREPE
==================================================================== * Legacy Prefix F3h-Group 1 * ==========================================
MS12-042/sysret-source/junk/sources/beaengineSources/Includes/instr_set/opcodes_prefixes.c:53
FunctionPrefREPNE
==================================================================== * Legacy Prefix F2h-Group 1 * ==========================================
MS12-042/sysret-source/junk/sources/beaengineSources/Includes/instr_set/opcodes_prefixes.c:37
FunctionPrefSEGCS
==================================================================== * Legacy Prefix 2Eh-Group 2 * ==========================================
MS12-042/sysret-source/junk/sources/beaengineSources/Includes/instr_set/opcodes_prefixes.c:69
FunctionPrefSEGDS
==================================================================== * Legacy Prefix 3Eh-Group 2 * ==========================================
MS12-042/sysret-source/junk/sources/beaengineSources/Includes/instr_set/opcodes_prefixes.c:83
FunctionPrefSEGES
==================================================================== * Legacy Prefix 26h-Group 2 * ==========================================
MS12-042/sysret-source/junk/sources/beaengineSources/Includes/instr_set/opcodes_prefixes.c:97
FunctionPrefSEGFS
==================================================================== * Legacy Prefix 64h-Group 2 * ==========================================
MS12-042/sysret-source/junk/sources/beaengineSources/Includes/instr_set/opcodes_prefixes.c:111
FunctionPrefSEGGS
==================================================================== * Legacy Prefix 65h-Group 2 * ==========================================
MS12-042/sysret-source/junk/sources/beaengineSources/Includes/instr_set/opcodes_prefixes.c:126
FunctionPrefSEGSS
==================================================================== * Legacy Prefix 36h-Group 2 * ==========================================
MS12-042/sysret-source/junk/sources/beaengineSources/Includes/instr_set/opcodes_prefixes.c:141
MethodQueryInterface
CVE-2017-0213/CVE-2017-0213.cpp:93
← previousnext →401–500 of 1,453, ranked by callers