pwning.systems

Over the past few months I have been playing around quite a bit with LLM agents, particularly for vulnerability research.

Earlier this year, I discovered a flaw in XNU, which is the kernel that Apple uses on both macOS and iOS.

It is likely that we have all seen PHP filters that prevent us from encountering vulnerabilities.

Despite the fact that it is not a ‘real’ vulnerability, escaping privileged Docker containers is nevertheless pretty funny.

I imagine we’ve all heard about the recent “Sequoia” bug discovered by the Qualys Research team, identified by CVE-2021-33909.

Mistreatment by Apple Security is unfortunately something you’re likely to come across on a regular basis.

Following up on my first blog post, I’ve received a few requests to write about setting up a debugging environment; however, since everybody uses different emulators and so on, I’ll mainly focus on which config options are useful!

I’m writing this post because I often hear that kernel exploitation is intimidating or difficult to learn.