/explore

Click through on any links that interest you or select the planets on the right to continue exploring the Outer Web.
You are here

 www.willsroot.io
Will's Root: corCTF 2021 Fire of Salvation Writeup: Utilizing msg_msg Objects for Arbitrary Read and Arbitrary Write in the Linux Kernel
| | google.github.io
CVE-2021-22555: Turning \x00\x00 into 10000$ | security-research
3.3 parsecs away

Travel
| | This project hosts security advisories and their accompanying proof-of-concepts related to research conducted at Google which impact non-Google owned code.
| | syst3mfailure.io
[corCTF 2021] Wall Of Perdition: Utilizing msg_msg Objects For Arbitrary Read And Arbitrary Write In The Linux Kernel
1.4 parsecs away

Travel
| | Wall of Perdition is the second and harder part of a two part series of kernel exploitation challenges designed by FizzBuzz101 and me for corCTF 2021. You can find the writeup for the first part, Fire of Salvation, on his blog. Unfortunately, both challenges during competition remained unsolved. Wall of Perdition consists of a vulnerable Linux Kernel Module, the bug is a 0x30 bytes Use After Free Write in kmalloc-64. With this challenge, we present a new approach to transform the Linux kernel's IPC mechanism, more specifically, message operations, in an exploitation toolkit. Let's get started!
| | a13xp0p0v.tech
Four Bytes of Power: Exploiting CVE-2021-26708 in the Linux kernel | Alexander Popov
2.2 parsecs away

Travel
| | CVE-2021-26708 is assigned to five race condition bugs in the virtual socket implementation of the Linux kernel. I discovered and fixed them in January 2021. In this article I describe how to exploit them for local privilege escalation on Fedora 33 Server for x86_64, bypassing SMEP and SMAP.
| | paragonie.com
Choosing the Right Cryptography Library for your PHP Project: A Guide - Paragon Initiative Enterprises Blog
23.9 parsecs away

Travel
| If you're wondering which cryptography library you should use in your project, this should help make the decision easier.