← Înapoi la Urmăritori

Cel mai recent articol

Ultima verificare

Urmăritori 0 urmăritori
Articole: 18
  1. This blog series is still a work in progress.

  2. This blog series is still a work in progress.

  3. This blog series is still a work in progress.

  4. This blog series is still a work in progress.

  5. This blog series is still a work in progress.

  6. This blog series is still a work in progress.

  7. This blog series is still a work in progress.

  8. This blog series is still a work in progress.

  9. This blog series is still a work in progress.

  10. This blog series is still a work in progress.

  11. At TsukuCTF 2025, I created three kernel pwn challenges.

  12. In this post, I will explain PageJack, a universal and data-only exploitation technique that turns an off-by-one bug into a page UAF.

  13. In this post, I will explain USMA, a universal and data-only exploitation technique that allows us to patch kernel code from user space.

  14. In this post, I will explain Dirty Pipe, a universal and data-only exploitation technique that allows us to arbitrarily overwrite read-only files.

  15. In this post, I will explain DirtyCred, a universal and data-only exploitation technique that allows us to escalate privileges without a write primitive....

  16. In this post, I will explain Dirty PageTable, a universal and data-only exploitation technique that allows us to gain arbitrary read and write access to the...

  17. In this post, I will explain cross-cache attack, a fundamental technique for advanced Linux kernel exploitation.

  18. In this post, I will explain how to build and debug the Linux kernel.