├── .gitignore ├── .gitmodules ├── .zipignore ├── DEBUGGING.md ├── GNUmakefile ├── LICENSE ├── README.md ├── command.c ├── command.h ├── commanddoc.h ├── ctfinternal.h ├── ctftool.c ├── ctftool.h ├── docs ├── decrement-arbitrary-value.gif ├── edit-session-full.png ├── edit-thumb.png ├── exploit-chain-sequence.png ├── exploit-chain-sequence.wsd ├── fake-object-layout.png ├── fake-object-layout.wsd └── thumb.png ├── marshal.c ├── marshal.h ├── messages.c ├── messages.h ├── module.c ├── ntalpc.h ├── ntalpctyp.h ├── ntdll.h ├── payload.c ├── peproc.cc ├── scripts ├── ctf-consent-system.ctf ├── ctf-demo-editsession.ctf ├── ctf-exploit-common-vista.ctf ├── ctf-exploit-common-win10.ctf ├── ctf-exploit-common-win7.ctf ├── ctf-exploit-common-win8.ctf └── ctf-logonui-system.ctf ├── tools ├── consent.c ├── cursorpos.c └── watchdog.sh ├── util.c ├── util.h ├── version.rc ├── winmsg.c ├── winutil.c └── winutil.h /.gitignore: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/taviso/ctftool/HEAD/.gitignore -------------------------------------------------------------------------------- /.gitmodules: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/taviso/ctftool/HEAD/.gitmodules -------------------------------------------------------------------------------- /.zipignore: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/taviso/ctftool/HEAD/.zipignore -------------------------------------------------------------------------------- /DEBUGGING.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/taviso/ctftool/HEAD/DEBUGGING.md -------------------------------------------------------------------------------- /GNUmakefile: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/taviso/ctftool/HEAD/GNUmakefile -------------------------------------------------------------------------------- /LICENSE: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/taviso/ctftool/HEAD/LICENSE -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/taviso/ctftool/HEAD/README.md -------------------------------------------------------------------------------- /command.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/taviso/ctftool/HEAD/command.c -------------------------------------------------------------------------------- /command.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/taviso/ctftool/HEAD/command.h -------------------------------------------------------------------------------- /commanddoc.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/taviso/ctftool/HEAD/commanddoc.h -------------------------------------------------------------------------------- /ctfinternal.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/taviso/ctftool/HEAD/ctfinternal.h -------------------------------------------------------------------------------- /ctftool.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/taviso/ctftool/HEAD/ctftool.c -------------------------------------------------------------------------------- /ctftool.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/taviso/ctftool/HEAD/ctftool.h -------------------------------------------------------------------------------- /docs/decrement-arbitrary-value.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/taviso/ctftool/HEAD/docs/decrement-arbitrary-value.gif -------------------------------------------------------------------------------- /docs/edit-session-full.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/taviso/ctftool/HEAD/docs/edit-session-full.png -------------------------------------------------------------------------------- /docs/edit-thumb.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/taviso/ctftool/HEAD/docs/edit-thumb.png -------------------------------------------------------------------------------- /docs/exploit-chain-sequence.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/taviso/ctftool/HEAD/docs/exploit-chain-sequence.png -------------------------------------------------------------------------------- /docs/exploit-chain-sequence.wsd: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/taviso/ctftool/HEAD/docs/exploit-chain-sequence.wsd -------------------------------------------------------------------------------- /docs/fake-object-layout.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/taviso/ctftool/HEAD/docs/fake-object-layout.png -------------------------------------------------------------------------------- /docs/fake-object-layout.wsd: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/taviso/ctftool/HEAD/docs/fake-object-layout.wsd -------------------------------------------------------------------------------- /docs/thumb.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/taviso/ctftool/HEAD/docs/thumb.png -------------------------------------------------------------------------------- /marshal.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/taviso/ctftool/HEAD/marshal.c -------------------------------------------------------------------------------- /marshal.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/taviso/ctftool/HEAD/marshal.h -------------------------------------------------------------------------------- /messages.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/taviso/ctftool/HEAD/messages.c -------------------------------------------------------------------------------- /messages.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/taviso/ctftool/HEAD/messages.h -------------------------------------------------------------------------------- /module.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/taviso/ctftool/HEAD/module.c -------------------------------------------------------------------------------- /ntalpc.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/taviso/ctftool/HEAD/ntalpc.h -------------------------------------------------------------------------------- /ntalpctyp.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/taviso/ctftool/HEAD/ntalpctyp.h -------------------------------------------------------------------------------- /ntdll.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/taviso/ctftool/HEAD/ntdll.h -------------------------------------------------------------------------------- /payload.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/taviso/ctftool/HEAD/payload.c -------------------------------------------------------------------------------- /peproc.cc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/taviso/ctftool/HEAD/peproc.cc -------------------------------------------------------------------------------- /scripts/ctf-consent-system.ctf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/taviso/ctftool/HEAD/scripts/ctf-consent-system.ctf -------------------------------------------------------------------------------- /scripts/ctf-demo-editsession.ctf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/taviso/ctftool/HEAD/scripts/ctf-demo-editsession.ctf -------------------------------------------------------------------------------- /scripts/ctf-exploit-common-vista.ctf: -------------------------------------------------------------------------------- 1 | # vim: syntax=sh 2 | print This script is incomplete. 3 | -------------------------------------------------------------------------------- /scripts/ctf-exploit-common-win10.ctf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/taviso/ctftool/HEAD/scripts/ctf-exploit-common-win10.ctf -------------------------------------------------------------------------------- /scripts/ctf-exploit-common-win7.ctf: -------------------------------------------------------------------------------- 1 | # vim: syntax=sh 2 | print This script is incomplete. 3 | -------------------------------------------------------------------------------- /scripts/ctf-exploit-common-win8.ctf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/taviso/ctftool/HEAD/scripts/ctf-exploit-common-win8.ctf -------------------------------------------------------------------------------- /scripts/ctf-logonui-system.ctf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/taviso/ctftool/HEAD/scripts/ctf-logonui-system.ctf -------------------------------------------------------------------------------- /tools/consent.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/taviso/ctftool/HEAD/tools/consent.c -------------------------------------------------------------------------------- /tools/cursorpos.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/taviso/ctftool/HEAD/tools/cursorpos.c -------------------------------------------------------------------------------- /tools/watchdog.sh: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/taviso/ctftool/HEAD/tools/watchdog.sh -------------------------------------------------------------------------------- /util.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/taviso/ctftool/HEAD/util.c -------------------------------------------------------------------------------- /util.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/taviso/ctftool/HEAD/util.h -------------------------------------------------------------------------------- /version.rc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/taviso/ctftool/HEAD/version.rc -------------------------------------------------------------------------------- /winmsg.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/taviso/ctftool/HEAD/winmsg.c -------------------------------------------------------------------------------- /winutil.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/taviso/ctftool/HEAD/winutil.c -------------------------------------------------------------------------------- /winutil.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/taviso/ctftool/HEAD/winutil.h --------------------------------------------------------------------------------