{"id":17977056,"url":"https://github.com/0xdea/raptor_romhack21","last_synced_at":"2025-07-03T07:05:25.776Z","repository":{"id":134566465,"uuid":"396842087","full_name":"0xdea/raptor_romhack21","owner":"0xdea","description":"#RomHack21 raptor's party pack.","archived":false,"fork":false,"pushed_at":"2024-01-04T15:49:54.000Z","size":28604,"stargazers_count":7,"open_issues_count":0,"forks_count":1,"subscribers_count":4,"default_branch":"main","last_synced_at":"2025-07-03T07:04:19.632Z","etag":null,"topics":["exploits","format-string-attack","slides","solaris","vulnerability"],"latest_commit_sha":null,"homepage":"https://www.romhack.io","language":"C","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/0xdea.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2021-08-16T14:56:15.000Z","updated_at":"2024-10-26T00:36:32.000Z","dependencies_parsed_at":"2024-10-29T18:05:18.094Z","dependency_job_id":null,"html_url":"https://github.com/0xdea/raptor_romhack21","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/0xdea/raptor_romhack21","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/0xdea%2Fraptor_romhack21","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/0xdea%2Fraptor_romhack21/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/0xdea%2Fraptor_romhack21/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/0xdea%2Fraptor_romhack21/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/0xdea","download_url":"https://codeload.github.com/0xdea/raptor_romhack21/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/0xdea%2Fraptor_romhack21/sbom","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":263279262,"owners_count":23441680,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["exploits","format-string-attack","slides","solaris","vulnerability"],"created_at":"2024-10-29T17:26:12.293Z","updated_at":"2025-07-03T07:05:25.733Z","avatar_url":"https://github.com/0xdea.png","language":"C","funding_links":[],"categories":[],"sub_categories":[],"readme":"# raptor_romhack21\n[![](https://img.shields.io/github/stars/0xdea/raptor_romhack21.svg?style=flat\u0026color=yellow)](https://github.com/0xdea/raptor_romhack21)\n[![](https://img.shields.io/github/forks/0xdea/raptor_romhack21.svg?style=flat\u0026color=green)](https://github.com/0xdea/raptor_romhack21)\n[![](https://img.shields.io/github/watchers/0xdea/raptor_romhack21.svg?style=flat\u0026color=red)](https://github.com/0xdea/raptor_romhack21)\n[![](https://img.shields.io/badge/twitter-%400xdea-blue.svg)](https://twitter.com/0xdea)\n[![](https://img.shields.io/badge/mastodon-%40raptor-purple.svg)](https://infosec.exchange/@raptor)\n\n\u003e \"Converting a memory corruption into a nice weird machine is quite satisfying.\"\n\u003e\n\u003e -- Mark Dowd\n\nThis repository contains all materials related to *\"My last Solaris talk (not your average keynote)\"* presented at #RomHack21 on September 25, 2021.\n\nRelated links:  \nhttps://youtu.be/Nc9ZLTb2hQ8 (video)  \nhttp://phrack.org/issues/70/13.html#article (article)  \nhttps://security.humanativaspa.it/my-last-solaris-talk-not-your-average-keynote/ (blog)\n\n## article\n* [**Exploiting a Format String Bug in Solaris CDE**](https://github.com/0xdea/raptor_romhack21/blob/main/article/phrack70_13.txt). A Phrack article that expands on my presentation. \n\n## exploits\n* [**raptor_dtprintcheckdir_sparc2.c**](https://github.com/0xdea/raptor_romhack21/blob/main/exploits/raptor_dtprintcheckdir_sparc2.c). The Solaris/SPARC format string exploit I dissected during my presentation. \n* [**raptor_dtprintcheckdir_sparc.c**](https://github.com/0xdea/raptor_romhack21/blob/main/exploits/raptor_dtprintcheckdir_sparc.c). Another version of the same exploit that targets function activation records.\n* [**raptor_dtprintcheckdir_intel2.c**](https://github.com/0xdea/raptor_romhack21/blob/main/exploits/raptor_dtprintcheckdir_intel2.c). Solaris/Intel format string exploit.\n* [**raptor_dtprintcheckdir_intel.c**](https://github.com/0xdea/raptor_romhack21/blob/main/exploits/raptor_dtprintcheckdir_intel.c). Solaris/Intel stack-based buffer overflow exploit.\n\n## slides\n* [**last.pdf**](https://github.com/0xdea/raptor_romhack21/blob/main/slides/last.pdf). Slide deck presented at #RomHack21 (PDF version).\n* [**last.pptx**](https://github.com/0xdea/raptor_romhack21/blob/main/slides/last.pptx). Slide deck presented at #RomHack21 (PowerPoint version).\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2F0xdea%2Fraptor_romhack21","html_url":"https://awesome.ecosyste.ms/projects/github.com%2F0xdea%2Fraptor_romhack21","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2F0xdea%2Fraptor_romhack21/lists"}