newbie dive into binary

昨日は海を見に行きました

Entries from 2022-02-01 to 1 month

2022-02-24

【pwn 60.0】Fire of Salvation - CoRCTF2021 (kernel exploit)

keywords kernel exploit / msg_msg / msg_seg / userfault_fd / cred walk / kmalloc-4k / shm_file_data / load_msg 1: TL;DR 2: イントロ 3: static lysithea module overview 4: vulnerability 5: FGKASLR 6: kernel .data leak rough plan to leak data…

2022-02-17

【pwn 59.0】nightclub - pbctf2021 (kernel exploit)

kernel exploitation pwn - pbctf

keywords kernel exploit / msg_msg / msg_msgseg / modprobe_path 1: static lysithea reverse module abstraction 2: vulns single NULL-byte overflow 10 bytes overflow NIGHT_INFO 3: leak heap addr via `msg_msg` / `msg_msgseg` abstraction of heap…

You can cite code or comments in my blog as you like basically.
There are some exceptions.
1. When the code belongs to some other license. In that case, follow it.
2. You can't use them for evil purpose.
I don't take any responsibility for using my code or comment.
If you find my blog useful, I'll appreciate if you leave comments.

This website uses Google Analytics.It uses cookies to help the website analyze how you use the site. You can manage the functionality by disabling cookies.