/explore

Click through on any links that interest you or select the planets on the right to continue exploring the Outer Web.
You are here

 www.willsroot.io
Will's Root: Eternal-Tux: Crafting a Linux Kernel KSMBD 0-Click RCE Exploit from N-Days
| | klecko.github.io
BFS Ekoparty 2022 Kernel exploitation challenge write-up | Klecko Blog
3.4 parsecs away

Travel
| | Last month Blue Frost Security published two exploitation challenges for Ekoparty 2022. One of them was a Linux kernel challenge. I don't have much experience with Linux kernel exploitation, so this was a good opportunity to practise. I also write this up as a reference for my future self.
| | a13xp0p0v.tech
Four Bytes of Power: Exploiting CVE-2021-26708 in the Linux kernel | Alexander Popov
3.1 parsecs away

Travel
| | CVE-2021-26708 is assigned to five race condition bugs in the virtual socket implementation of the Linux kernel. I discovered and fixed them in January 2021. In this article I describe how to exploit them for local privilege escalation on Fedora 33 Server for x86_64, bypassing SMEP and SMAP.
| | yanglingxi1993.github.io
Dirty_Pagetable
3.0 parsecs away

Travel
| |
| | blog.infosectcbr.com.au
Linux Kernel Stack Smashing - InfoSect Blog
16.5 parsecs away

Travel
| Dr Silvio Cesare@silviocesare Summary In this blog post I'll discuss how to exploit the Linux kernel via a stack smashing attack. I'll be attacking the latest kernel version. I'll also introduce a vulnerable device driver that I wrote so that I can focus on the exploitation development and not the vulnerability research. A number of...