Skip to content

Commit

Permalink
bump ver and update README (#52)
Browse files Browse the repository at this point in the history
  • Loading branch information
clearbluejar authored Nov 1, 2023
1 parent b9b17db commit 7f11ceb
Show file tree
Hide file tree
Showing 2 changed files with 27 additions and 1 deletion.
26 changes: 26 additions & 0 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -599,6 +599,7 @@ INFO | ghidriff | Wrote .ghidriffs/json/ntoskrnl.exe.10.0.22621.1344-ntoskrnl.ex
#### Analyze the Diff
Results in this beatiful markdown: [ntoskrnl.exe.10.0.22621.1344-ntoskrnl.exe.10.0.22621.1413.diff.md](https://gist.github.com/clearbluejar/b95ae854a92ee917cd0b5c7055b60282)
See if you can figure out what function was patched for [CVE-2023-2342](https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23420).
Expand All @@ -607,6 +608,31 @@ See if you can figure out what function was patched for [CVE-2023-2342](https://
Prefer a side by side diff? Try out `ghidriff`'s custom html viewer. https://diffpreview.github.io/?b95ae854a92ee917cd0b5c7055b60282
##### Results stored in `ghidriffs` folder
```bash
$ tree ghidriffs
ghidriffs
├── ghidra_projects
│ └── ghidriff-ntoskrnl.exe.10.0.22621.2215-ntoskrnl.exe.10.0.22621.2283
│ ├── ghidriff-ntoskrnl.exe.10.0.22621.2215-ntoskrnl.exe.10.0.22621.2283.gpr
│ └── ghidriff-ntoskrnl.exe.10.0.22621.2215-ntoskrnl.exe.10.0.22621.2283.rep
│ ├── idata
│ ├── project.prp
│ ├── user
│ └── versioned
├── ghidriff.log
├── json
│ └── ntoskrnl.exe.10.0.22621.2215-ntoskrnl.exe.10.0.22621.2283.ghidriff.json
├── ntoskrnl.exe.10.0.22621.2215-ntoskrnl.exe.10.0.22621.2283.ghidriff.md
└── symbols
├── ntkrnlmp.pdb
├── 69071F680ADFE36F178C6EC06E79E09C1
│ └── ntkrnlmp.pdb
└── 738ED8FF966E8502EFE17095B9F1F5481
└── ntkrnlmp.pdb
```
### Diffing CVE-2023-21768
Details of the CVE-2023-21768 (detailed in this blog [post](https://securityintelligence.com/posts/patch-tuesday-exploit-wednesday-pwning-windows-ancillary-function-driver-winsock/)). What if you wanted to repeat this patch diff with `ghidriff`?
Expand Down
2 changes: 1 addition & 1 deletion ghidriff/__init__.py
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
__version__ = '0.5.0'
__version__ = '0.5.1'
__author__ = 'clearbluejar'

# Expose API
Expand Down

0 comments on commit 7f11ceb

Please sign in to comment.