【pwn 38.1】SECCON CTF 2020 ~ part.2 kstack (kernel exploit)

keywords kernel exploit / setxattr / userfaultfd / shm_file_data / double free 1: イントロ 2: 静的解析 2: Vulns 3: Leak kernbase via shm_file_data 4: Double free via failure of copy_from_user 4: Rule PC via seq_operations and setxattr 5: R…

You can cite code or comments in my blog as you like basically.
The exceptions are when the code belongs to some other license. In that case, follow it. Also, you can't use them for evil purpose. Finally, I don't take any responsibility for using my code or comment.
If you find my blog useful, I'll appreciate if you leave comments.