CVE-2025-24985 PoC — Microsoft Windows Fast Fat Driver 安全漏洞

Description

Detection of malicious VHD files for CVE-2025-24985

介绍

# cve-2025-24985

Compute the number of cluster of a VHD file to detect overflow.

Supportted boot sectors:
- [x] MBR
- [x] GPT

## Usage

```sh
python -m cve_2025_24985 -f <path/to/file.vhd>
```

## Setup
### Nix

```sh
# With direnv:
direnv allow

# Or Without direnv:
nix develop
```

### Peotry

WIP

### Docker

WIP

## TODO:

- [x] Auto build libvhdi with poetry
- [ ] Setup poetry install
- [ ] Fix dockerfile with pyvhdi dependency

文件快照

备注