with offensivecon around the corner, i figured id write another post on linux kernel exploitation techniques - this time i cover the world of page table exploitation! enjoy đ€ sam4k.com/page-table-k...
Kernel Exploitation Techniques: Turning The (Page) Tables
This post explores attacking page tables as a Linux kernel exploitation technique for gaining powerful read/write primitives.
sam4k.com
Diving into Linux kernel security Alexander Popov published his H2HC talk slides that describe how to get started with learning Linux kernel security and knowingly configure the security parameters of Linux-based systems. a13xp0p0v.github.io/img/Alexande...
We are extending our call for papers to January 1, 2025! We are now targeting an end of January release. If you have any Linux/ELF related research, projects, or papers, we would love to publish them! Huge thank you to everyone who has already submitted! tmpout.sh/blog/vol4-cf...
it's been a while, but here's a new post in my linternals series where i attempt to introduce the linux kernel's memory management subsystem đ§ sam4k.com/linternals-e...
Linternals: Exploring The mm Subsystem via mmap [0x01]
In this series we'll explore the Linux kernel's memory management subsystem, using a simple userspace program as our starting point.
sam4k.com
for anyone interested in linux kernel or android security research, i'm experimenting with a custom feed here bsky.app/profile/did:...
Novel approach to exploit a limited OOB on Ubuntu at Pwn2Own Vancouver 2024 Slides from a talk by Pumpkin Chang about exploiting a stack out-of-bounds write bug in the traffic control subsystem. u1f383.github.io/slides/talks...
pretty cool UAF in the handling of stack expansion in kernels 6.1 - 6.4 https://seclists.org/oss-sec/2023/q3/4
oss-sec: StackRot (CVE-2023-3269): Linux kernel privilege escalation vulnerability
seclists.org
just got back from speaking on kernel exploitation at typhooncon in seoul: awesome organisers, attendees and city :)
heading off to seoul tomorrow, super excited for my first time in south korea and at typhooncon