Cr4sh/ThinkPwn external links

---

GitHub - View repository

GitHub.dev - Open in online code editor

Star history - Growth chart over time

deps.dev - Dependencies and security vulnerabilities

Gitingest - Export source code for LLM usage

Repomix - Export source code for LLM usage

uithub - Export source code for LLM usage

Close

Cr4sh/ThinkPwn

Readme badge preview -

If you own this repo, copy the snippet below and add it to your README.md

---

Copy

[![RelatedRepos](https://img.shields.io/badge/related-repos-yellow)](https://relatedrepos.com/gh/Cr4sh/ThinkPwn)

Close

Cr4sh / ThinkPwnView on GitHubMore

• External links
• Readme badge

Started as arbitrary System Management Mode code execution exploit for Lenovo ThinkPad model line, ended as exploit for industry-wide 0day vulnerability in machines of many vendors

☆701May 13, 2022Updated 3 years ago

Alternatives and similar repositories for ThinkPwn

Users that are interested in ThinkPwn are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.

• Cr4sh / fwexpl

  View on GitHub
  PC firmware exploitation tool and library
  ☆260May 13, 2022Updated 3 years ago
• Cr4sh / Aptiocalypsis

  View on GitHub
  Arbitrary SMM code execution exploit for industry-wide 0day vulnerability in AMI Aptio based firmwares
  ☆76Oct 22, 2016Updated 9 years ago
• Cr4sh / PeiBackdoor

  View on GitHub
  PEI stage backdoor for UEFI compatible firmware
  ☆226May 1, 2021Updated 4 years ago
• Cr4sh / SmmBackdoor

  View on GitHub
  First open source and publicly available System Management Mode backdoor for UEFI based platforms. Good as general purpose playground for…
  ☆628Oct 9, 2023Updated 2 years ago
• Cr4sh / openreil

  View on GitHub
  Open source library that implements translator and tools for REIL (Reverse Engineering Intermediate Language)
  ☆512May 1, 2021Updated 4 years ago
• sstjohn / thundergate

  View on GitHub
  an open source toolkit for PCI bus exploration
  ☆72Dec 18, 2016Updated 9 years ago
• chipsec / chipsec

  View on GitHub
  Platform Security Assessment Framework
  ☆3,202Updated this week
• platomav / MEAnalyzer

  View on GitHub
  Intel Engine & Graphics Firmware Analysis Tool
  ☆1,251Dec 22, 2025Updated 3 months ago
• Cr4sh / UEFI_boot_script_expl

  View on GitHub
  CHIPSEC module that exploits UEFI boot script table vulnerability
  ☆136Jan 25, 2016Updated 10 years ago
• skochinsky / me-tools

  View on GitHub
  Tools for working with Intel ME
  ☆223Mar 17, 2017Updated 9 years ago
• Cr4sh / smram_parse

  View on GitHub
  System Management RAM analysis tool
  ☆83Aug 9, 2024Updated last year
• hdm / juniper-cve-2015-7755

  View on GitHub
  Notes, binaries, and related information from analysis of the CVE-2015-7755 & CVE-2015-7756 issues within Juniper ScreenOS
  ☆105Jan 25, 2021Updated 5 years ago
• Cr4sh / secretnet_expl

  View on GitHub
  LPE exploits for Secret Net and Secret Net Studio
  ☆52Mar 1, 2016Updated 10 years ago
• jethrogb / uefireverse

  View on GitHub
  Tools to help with Reverse Engineering UEFI-based firmware
  ☆400Mar 24, 2016Updated 10 years ago
• vvalien / win_exp

  View on GitHub
  ☆74Jul 13, 2022Updated 3 years ago
• theopolis / uefi-firmware-parser

  View on GitHub
  Parse BIOS/Intel ME/UEFI firmware related structures: Volumes, FileSystems, Files, etc
  ☆899Feb 27, 2026Updated 3 weeks ago
• skochinsky / jeff-tools

  View on GitHub
  JEFF file format tools
  ☆27Dec 24, 2015Updated 10 years ago
• sslab-gatech / DrK

  View on GitHub
  The DrK Attack - Proof of concept
  ☆348Mar 13, 2022Updated 4 years ago
• koczkatamas / CVE-2016-0051

  View on GitHub
  EoP (Win7) & BSoD (Win10) PoC for CVE-2016-0051 (MS-016)
  ☆323May 9, 2016Updated 9 years ago
• Cr4sh / WindowsRegistryRootkit

  View on GitHub
  Kernel rootkit, that lives inside the Windows registry values data
  ☆504Oct 8, 2017Updated 8 years ago
• Rootkitsmm-zz / Win32k-Fuzzer

  View on GitHub
  Fuzz and Detect "Use After Free" vulnerability in win32k.sys ( Heap based )
  ☆138Nov 28, 2015Updated 10 years ago
• ptresearch / IntelTXE-PoC

  View on GitHub
  Intel Management Engine JTAG Proof of Concept
  ☆538Jun 12, 2020Updated 5 years ago
• REhints / Publications

  View on GitHub
  Conference slides and White-papers
  ☆360Jan 3, 2020Updated 6 years ago
• r00tkillah / HORSEPILL

  View on GitHub
  HORSEPILL rootkit PoC
  ☆234Aug 5, 2016Updated 9 years ago
• hasherezade / demos

  View on GitHub
  Demos of various injection techniques found in malware
  ☆791Feb 15, 2022Updated 4 years ago
• misterch0c / firminator_backend

  View on GitHub
  The first open source vulnerability scanner for firmwares
  ☆197Jul 18, 2016Updated 9 years ago
• Rootkitsmm-zz / cve-2016-0040

  View on GitHub
  Exploiting CVE-2016-0040 uninitialized pointer
  ☆45Jul 17, 2016Updated 9 years ago
• FSecureLABS / CVE-2016-7255

  View on GitHub
  An exploit for CVE-2016-7255 on Windows 7/8/8.1/10(pre-anniversary) 64 bit
  ☆82Mar 9, 2017Updated 9 years ago
• IOActive / I-know-where-your-page-lives

  View on GitHub
  I Know Where Your Page Lives: Derandomizing the latest Windows 10 Kernel - ZeroNights 2016
  ☆172Dec 7, 2016Updated 9 years ago
• embedi / meloader

  View on GitHub
  Intel Management Engine firmware loader plugin for IDA
  ☆93Jul 27, 2017Updated 8 years ago
• Cisco-Talos / ROPMEMU

  View on GitHub
  ROPMEMU is a framework to analyze, dissect and decompile complex code-reuse attacks.
  ☆288May 24, 2016Updated 9 years ago
• ptresearch / me-disablement

  View on GitHub
  ☆288Jun 14, 2016Updated 9 years ago
• lgandx / PoC

  View on GitHub
  Various PoCs
  ☆502Jan 27, 2020Updated 6 years ago
• ptresearch / parseMFS

  View on GitHub
  This repository contains Python 2.7 scripts for parsing MFS/MFSB partition and extracting contained files.
  ☆34Dec 19, 2017Updated 8 years ago
• tandasat / SmmExploit

  View on GitHub
  The report and the exploit of CVE-2021-26943, the kernel-to-SMM local privilege escalation vulnerability in ASUS UX360CA BIOS version 303…
  ☆145Mar 29, 2021Updated 4 years ago
• RUB-SysSec / Microcode

  View on GitHub
  Microcode Updates for the USENIX 2017 paper: Reverse Engineering x86 Processor Microcode
  ☆355Oct 21, 2018Updated 7 years ago
• mempodippy / vlany

  View on GitHub
  Linux LD_PRELOAD rootkit (x86 and x86_64 architectures)
  ☆974Dec 11, 2020Updated 5 years ago
• scumjr / the-sea-watcher

  View on GitHub
  Implementation of the SMM rootkit "The Watcher"
  ☆132Mar 16, 2022Updated 4 years ago
• ampotos / dynStruct

  View on GitHub
  Reverse engineering tool for automatic structure recovering and memory use analysis based on DynamoRIO and Capstone
  ☆324Aug 12, 2019Updated 6 years ago