/explore

Click through on any links that interest you or select the planets on the right to continue exploring the Outer Web.
You are here

 www.hackthebox.com
UNI CTF 2021: Showcase of Modern Linux Kernel Exploitation Techniques
| | www.willsroot.io
Will's Root: Reviving Exploits Against Cred Structs - Six Byte Cross Cache Overflow to Leakless Data-Oriented Kernel Pwnage
2.5 parsecs away

Travel
| | Vulnerability Research on Low-Level Systems
| | syst3mfailure.io
[corCTF 2021] Wall Of Perdition: Utilizing msg_msg Objects For Arbitrary Read And Arbitrary Write In The Linux Kernel
2.5 parsecs away

Travel
| | Wall of Perdition is the second and harder part of a two part series of kernel exploitation challenges designed by FizzBuzz101 and me for corCTF 2021. You can find the writeup for the first part, Fire of Salvation, on his blog. Unfortunately, both challenges during competition remained unsolved. Wall of Perdition consists of a vulnerable Linux Kernel Module, the bug is a 0x30 bytes Use After Free Write in kmalloc-64. With this challenge, we present a new approach to transform the Linux kernel's IPC mechanism, more specifically, message operations, in an exploitation toolkit. Let's get started!
| | duasynt.com
Linux Kernel universal heap spray - Vitaly Nikolenko
1.6 parsecs away

Travel
| | Universal Linux kernel heap spray
| | blog.lexfo.fr
Lexfo's security blog - CVE-2017-11176: A step-by-step Linux Kernel exploitation (part 1/4)
35.0 parsecs away

Travel
| The first article covers an in-depth CVE/bug analysis, designs an attack scenario and starts implementing a PoC in ring-0 with SystemTap. The core concept section focuses on file/socket related data structures, netlink and refcounters.