Vschko

2021-10-24 13:10:42 Writeup of iPwnKit task from Defcon ctf. The article discusses how to exploit the race-condition double-fetch issue in IOKit kernel extension.
link: https://trungnguyen1909.github.io/blog/post/DEFCON26-Qual/iPwnKit/

#macos #iokit #kernel #ctf Open / Comment

2021-10-05 11:01:23 Detailed explanation of slab allocator’s internals with illustrations. Linux kernel version isn’t too old (5.3.13), so the article is still relevant.
link: https://hammertux.github.io/slab-allocator

#heap #slab #heap #kernel Open / Comment

2021-10-05 09:03:00 Large book about fuzzing with interactive examples (jupyter). The most famous fuzzing techniques are covered.
link: https://www.fuzzingbook.org/html/00_Table_of_Contents.html

#fuzzing #interfaces #book Open / Comment

2021-09-25 21:47:13 Short article about some structures that can be used for linux kernel exploitation. It is worth transferring this notes to the database, just in case, because researcher did a big work evaluating the usefulness of each interface. Language - Japanese.
link: https://ptr-yudai.hatenablog.com/entry/2020/03/16/165628

#kernel #pwn #structures #linux Open / Comment

2021-09-18 22:44:56 [Just4me]
https://developer.apple.com/library/archive/documentation/Darwin/Conceptual/KernelProgramming/booting/booting.html Open / Comment

2021-09-16 08:36:30 Flipping one bit leads to kernel privilege escalation: making kernel page accessible from userspace (nokaslr)

link: https://www.willsroot.io/2021/04/midnightsunquals-2021-brohammer-single.html
#pwn #linux #kernel #onebit Open / Comment

2021-09-14 14:09:46 #2 Setting up own IOS environment for security researches using xnu-qemu-arm64.
link: https://alephsecurity.com/2019/06/17/xnu-qemu-arm64-1/

#kernel #xnu Open / Comment

2021-09-05 19:09:55 https://github.com/sh4m2hwz/win_exp_resoures
#windows #exploitation Open / Comment

2021-09-04 19:30:43 Recently, I found a great article by Brandon Azad (short summary) about all Iphone’s hardware and software mitigations ( IOS < 13, so PAC not covered ). I recommend to study the material, at least for improving general purview :)

link: https://googleprojectzero.blogspot.com/2020/06/a-survey-of-recent-ios-kernel-exploits.html
#ios #mitigations Open / Comment

2021-09-01 01:49:10 4acae6a333027c7a47c65cdc7949c28b2a5577d7e59c288a7d2e51c6fd613490 Open / Comment