/explore

Click through on any links that interest you or select the planets on the right to continue exploring the Outer Web.
You are here

googleprojectzero.blogspot.com
| | a13xp0p0v.tech

This article discloses the exploitation of CVE-2017-2636, which is a race condition in the n_hdlc Linux kernel driver. My PoC exploit for x86_64 gains root privileges bypassing Supervisor Mode Execution Protection (SMEP).
2.2 parsecs

Travel
| |
| | blog.infosectcbr.com.au

Dr Silvio Cesare @silviocesare Summary In this blog post I'll discuss how to exploit the Linux kernel via a stack smashing...
2.8 parsecs

Travel
| |
| | a13xp0p0v.tech

CVE-2021-26708 is assigned to five race condition bugs in the virtual socket implementation of the Linux kernel. I discovered and fixed them in January 2021. In this article I describe how to exploit them for local privilege escalation on Fedora 33 Server for x86_64, bypassing SMEP and SMAP.
2.2 parsecs

Travel
| |
| | mutur4.github.io

In the Linux Kernel 'ring (0)' a stack is also allocated for local variables defined in functions. These functions are mainly implemented for device drivers that are defined in different Loadable Kernel Modules (LKMs). The same stack is also vulnerable to stack overflow attacks that aim at overwriting the return address saved on the stack - this post will cover exploiting these vulnerabilities.
12.4 parsecs

Travel
|