w1redch4d

资源

Windows XP/Server 2k3 Source master branch is meant to hold untouched source code for referencing. better to torrent then clone entire repo.

The criteria I used to rank:

The level of complexity of the research. (How hard for me to do the same research?)
The usefulness of the research to other security researchers.
Novelty, scale of exploitation and impact

Top candidates

Exploiting Hardened .NET Deserialization: New Exploitation Ideas and Abuse of Insecure Serialization
https://github.com/thezdi/presentations/blob/main/2023_Hexacon/whitepaper-net-deser.pdf

	HANDLE get_handle_to_process(LPWSTR process)
	{
	HANDLE hProcess = NULL;

	enumerate_handles([&](PSYSTEM_HANDLE_TABLE_ENTRY_INFO handle) {

	if(GetCurrentProcessId() != handle->UniqueProcessId) return STATUS_UNSUCCESSFUL;

	BOOL found = FALSE;
	PVOID buffer = NULL;

	# This list contains all SSIDs I observed during defcon 31. Includes registration, walking around the con. Captured using a Pineapple MK7

	!!
	#ATTHEMOXY
	#Free Simon Wi-Fi
	*WIFI-AIRPORT
	.WynnEncoreGuest
	.YUL Wi-Fi
	01-STATION-INN
	07edba9d8f623dc6f4d86eccf53d1280

	// Created by Anthony Printup on 4/21/2023.
	#pragma once

	#include <algorithm>
	#include <bitset>
	#include <cstdint>
	#include <exception>
	#include <functional>
	#include <ranges>