Creează un cont pentru a te abona la acest blog și a-i urmări articolele pe pagina Lectură.
-
This blog series is still a work in progress.
-
This blog series is still a work in progress.
-
This blog series is still a work in progress.
-
This blog series is still a work in progress.
-
This blog series is still a work in progress.
-
This blog series is still a work in progress.
-
This blog series is still a work in progress.
-
This blog series is still a work in progress.
-
This blog series is still a work in progress.
-
This blog series is still a work in progress.
-
At TsukuCTF 2025, I created three kernel pwn challenges.
-
In this post, I will explain PageJack, a universal and data-only exploitation technique that turns an off-by-one bug into a page UAF.
-
In this post, I will explain USMA, a universal and data-only exploitation technique that allows us to patch kernel code from user space.
-
In this post, I will explain Dirty Pipe, a universal and data-only exploitation technique that allows us to arbitrarily overwrite read-only files.
-
In this post, I will explain DirtyCred, a universal and data-only exploitation technique that allows us to escalate privileges without a write primitive....
-
In this post, I will explain Dirty PageTable, a universal and data-only exploitation technique that allows us to gain arbitrary read and write access to the...
-
In this post, I will explain cross-cache attack, a fundamental technique for advanced Linux kernel exploitation.
-
In this post, I will explain how to build and debug the Linux kernel.