cbwang505
59 posts

cbwang505
@cbwang505
Chief Vulnerability Researcher | Windows full-chain exploitation, kernel internals, and COM security | 2024 MSRC MVR Top 100
Katılım Kasım 2019
154 Takip Edilen571 Takipçiler
cbwang505 retweetledi

Windows Client Side Caching driver (csc.sys) Elevation of Privilege Vulnerability我的CVE-2026-26176致谢链接msrc.microsoft.com/update-guide/e…
English
cbwang505 retweetledi

All symbol addresses for winhv.sys driver from Hyper-V VM using powershell

Arthur "Gerhart" Khudyaev@gerhart_x
Got symbol address from Hyper-V VM (Windows 11) using powershell. Dbgshell can do it for host operating system, as I think.
English
cbwang505 retweetledi

Pwned Windows 11, Claude Code, Cursor, and CodeX after a massive all-nighter! 🎯
Pure brainpower, 0 LLMs. Props to @cbwang505 & @carmen_cqq.
Heads down, sprinting for the next batch of 0days. 🏃♂️💨
English

debug isolated usermode process on Nested Virtualization guest vm
github.com/cbwang505/Secu…

English
cbwang505 retweetledi

Unveiling the details of Windows VTL2, despite its absence in the MSDN documentation. 🤔
#hyperv #windows #virtualization
howknows.github.io/roooot.github.…
English


CVE-2025-24050 seems like another case of False File Immutability bug mentioned by @GabrielLandau
Host file over SMB to bypass exclusive access -> Return smaller OffsetTableSize when .rct file is read over SMB -> OOB read when parsing OffsetTable
cbwang505@cbwang505
Hyper-v虚拟磁盘驱动vhdmp.sys漏洞汇总分析 bbs.kanxue.com/thread-285976.… [CVE-2025-24048致谢](msrc.microsoft.com/update-guide/e…) [CVE-2025-24050致谢](msrc.microsoft.com/update-guide/e…)
English




Hyper-v虚拟磁盘驱动vhdmp.sys漏洞汇总分析
bbs.kanxue.com/thread-285976.…
[CVE-2025-24048致谢](msrc.microsoft.com/update-guide/e…)
[CVE-2025-24050致谢](msrc.microsoft.com/update-guide/e…)
中文

Smb Quic Replay Tool is an tool for Replay SMB protocol over QUIC support Windows 11 , with test for vhdx file container for implement local bind file store backend on the same computer host both client and server network transport.
github.com/cbwang505/SmbQ…

English







