/explore
|
You are here 
|
blog.infosectcbr.com.au | ||
| | | | |
www.willsroot.io
Vulnerability Research on Low-Level Systems |
|
| | | | | ||
| | | | |
duasynt.com
Universal Linux kernel heap spray |
|
| | | | | ||
| | | | |
a13xp0p0v.github.io
It's 2020. Quarantines are everywhere - and here I'm writing about one, too. But this quarantine is of a different kind. In this article I'll describe the Linux Kernel Heap Quarantine that I developed for mitigating kernel use-after-free exploitation. |
|
| | | | | ||
| | | | |
blog.quarkslab.com
On February 9, 2017, Natalie Silvanovich from Google Project Zero unrestricted access to P0's issue #983 [1], titled "Microsoft Edge: Use-after-free in TypedArray.sort", which got assigned CVE-2016-7288 and was patched as part of Microsoft security bulletin MS16-145 [2] during December 2016. In this blog post we discuss how I managed to exploit this UAF issue to obtain remote code execution on MS Edge. |
|
| | | |||
