patch-diff-exploit
ZHReproduce bugs hidden in security patch changes.
What it does
Derives reproducible vulnerability proofs of concept by comparing software binaries before and after security patches.
When to use it
Use to investigate a CVE without a public proof of concept, reproduce recently patched vulnerabilities, or identify incompletely patched software branches.
How to use it
Give it a security patch or vulnerability to investigate; it obtains comparison binaries and develops a proof of concept validated against patched and unpatched versions.
Uses
Good to know
- acts without asking
What you need · 2
The prescribed bootstrap command uses PowerShell when missing analysis tools need provisioning.
Delegates symbol migration to binary-diff when the older binary has symbols and the patched version does not; it is not required when suitable symbols are already available.
Access · 8
This skill
Microsoft Update Catalog
Downloads Windows security patches
msdl.microsoft.com
Downloads Windows debugging symbols