with offensivecon around the corner, i figured id write another post on linux kernel exploitation techniques - this time i cover the world of page table exploitation! enjoy 🤓
| Blog | https://sam4k.com |
| https://twitter.com/sam4k1 |
sam4k
- 290 Followers
- 130 Following
- 32 Posts
pwning kernels & blogging on os internals 🌱
it's been a while, but here's a new post in my linternals series where i attempt to introduce the linux kernel's memory management subsystem 🐧
https://sam4k.com/linternals-exploring-the-mm-subsystem-part-1/
Linux Kernel SecurityZDI-24-821: A Remote UAF in The Kernel's net/tipc
An article by @sam4k describing a slab use-after-free in the TIPC networking stack that can be triggered by both local and remote attackers.
https://sam4k.com/zdi-24-821-a-remote-use-after-free-in-the-kernels-net-tipc/
here's the write-up for the net/tipc vuln i found while working on my talk 🙌
https://sam4k.com/zdi-24-821-a-remote-use-after-free-in-the-kernels-net-tipc/
i keep forgetting to post here, but here are my slides from a recent talk i did on how to find bugs in the linux kernel 🤓
https://github.com/sam4k/talk-slides/blob/main/so_you_wanna_find_bugs_in_the_linux_kernel.pdf
psomasApparently, there's a new Linux privilege escalation exploit, StackRot, triggered by a use-after-free-by-RCU maple tree bug.
https://seclists.org/oss-sec/2023/q3/4 #linux #infosec
https://seclists.org/oss-sec/2023/q3/4 #linux #infosec
Quentin Minster PicavetLooks like I'll be presenting our work on KSMBD at OffensiveCon next month! 🥹
https://www.offensivecon.org/speakers/2023/guillaume-teissier-and-quentin-minster.html
https://twitter.com/offensive_con/status/1646461589908869120
Super excited to have the opportunity to speak at #TyphoonCon23 this year, thanks for having me! 🐧
chompieNow have a dedicated place to find all my blog posts past and present: http://chompie.rip! If you come across a dead link for a blog post of mine, you can find it there
here's a post exploring security fixes in the linux kernel with the help of a small tool i wrote 🐧
