Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
S-V-Project-Implementation-of-CVE-2015-3256 — Reproducible crash proof-of-concept for CVE-2015-3456 (VENOM) targeting QEMU's virtual floppy disk controller. Demonstrates guest-controlled writes to trigger host-side QEMU process crash with GDB analysis. | Kitploit
Tools/GitHubGitHub/puglia-ryan/s-v-project-implementation-of-cve-2015-3256
Vulnerability AnalysisExploitationFuzzingHardware SecurityBinary Exploitation
GitHubpuglia-ryan/s-v-project-implementation-of-cve-2015-3256

S-V-Project-Implementation-of-CVE-2015-3256

Reproducible crash proof-of-concept for CVE-2015-3456 (VENOM) targeting QEMU's virtual floppy disk controller. Demonstrates guest-controlled writes to trigger host-side QEMU process crash with GDB analysis.

View Repository
43 months agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2015-3456 (VENOM) — QEMU Crash PoC and Analysis

This repository contains a reproducible crash/DoS proof-of-concept for CVE-2015-3456 ("VENOM") using a vulnerable version of QEMU (v2.3.0).

The project demonstrates:

  • Guest-controlled writes to the virtual floppy disk controller (FDC)
  • Triggering the vulnerable QEMU FDC code path
  • Crashing the host-side QEMU process
  • Capturing crash information with GDB

This repository does not contain a VM escape or host code execution exploit.

Repository Structure

root@kitploit:~
src/
    venom-crash.c
        (Guest-side crash PoC)

scripts/
    run-alpine.sh
        (Launch vulnerable QEMU with Alpine Linux)
    run-alpine-gdb.sh
        (Launch vulnerable QEMU with Alpine Linux under GDB)

notes/
    setup.md
        (Markdown File which documents all of the setup steps taken/needed to execute the exploit as I did)

logs/
    example-gdb-logs.log
        (Example GDB crash output)

crash_demo.mp4
    (Demonstration video of venom-crash.c crashing QEMU)

README.md

.gitignore
Download Tool