https://github.com/niklasb/3dpwn
VirtualBox 3D exploits & PoCs
https://github.com/niklasb/3dpwn
Last synced: about 1 year ago
JSON representation
VirtualBox 3D exploits & PoCs
- Host: GitHub
- URL: https://github.com/niklasb/3dpwn
- Owner: niklasb
- License: bsd-3-clause
- Created: 2018-09-02T19:37:36.000Z (almost 8 years ago)
- Default Branch: master
- Last Pushed: 2019-01-24T15:10:23.000Z (over 7 years ago)
- Last Synced: 2025-04-04T10:46:57.831Z (over 1 year ago)
- Language: Python
- Size: 83 KB
- Stars: 160
- Watchers: 8
- Forks: 39
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
# VirtualBox 3D PoCs & exploits
*Author*: [@_niklasb](https://twitter.com/_niklasb)
[Overview article](https://phoenhex.re/2018-07-27/better-slow-than-sorry).
[License](https://github.com/niklasb/3dpwn/blob/master/LICENSE)
## Exploits
See the subdirectories other than `lib`.
## Debug build
For Arch Linux, you can use the provided PKGBUILD in `archpkg` to get a debug version of
5.2.18, with the 3D security fixes from July 2018 reverted.
## Library
`lib/hgcm.py` and `lib/chromium.py` provide high-level access to the HGCM interface and
to the `VBoxSharedCrOpenGL` service, via `VBoxGuest` IOCTLs.
`chromium.py` can be used to very easily experiment with Chromium from Python
inside the guest. I used it to build a very simple, completely dumb fuzzer that
found multiple trivial crashes in minutes.