r1ru

7 research items0 followers

Research

Linux Kernel Exploitation - PageJack

In this post, I will explain PageJack, a universal and data-only exploitation technique that turns an off-by-one bug into a page UAF. Download the handouts beforehand.

Linux Kernel Exploit Development Memory Corruption Privilege Escalation

Write-upPublished 3 May 20251 post View source →

Linux Kernel Exploitation - USMA

In this post, I will explain USMA, a universal and data-only exploitation technique that allows us to patch kernel code from user space. Download the handouts beforehand.

Kernel Linux Exploit Development Memory Corruption Privilege Escalation

Write-upPublished 2 May 20251 post View source →

Linux Kernel Exploitation - Dirty Pipe

In this post, I will explain Dirty Pipe, a universal and data-only exploitation technique that allows us to arbitrarily overwrite read-only files. Download the handouts beforehand.

Kernel Linux Exploit Development Memory Corruption Privilege Escalation

Write-upPublished 30 April 20251 post View source →

Linux Kernel Exploitation - DirtyCred

In this post, I will explain DirtyCred, a universal and data-only exploitation technique that allows us to escalate privileges without a write primitive. Download the handouts beforehand.

Linux Kernel Exploit Development Privilege Escalation Vulnerability Research

Write-upPublished 29 April 20251 post View source →

Linux Kernel Exploitation - Dirty PageTable

In this post, I will explain Dirty PageTable, a universal and data-only exploitation technique that allows us to gain arbitrary read and write access to the entire physical memory. Download the handouts beforehand.

Kernel Linux Exploit Development Memory Corruption Privilege Escalation

Write-upPublished 28 April 20251 post View source →

Linux Kernel Exploitation - Cross-Cache Attack

In this post, I will explain cross-cache attack, a fundamental technique for advanced Linux kernel exploitation. Understanding this technique is important to understand other exploitation techniques, such as Dirty PageTable and DirtyCred, which I will cover in future posts. Download the handouts beforehand.

Kernel Linux Exploit Development Memory Corruption Privilege Escalation

Write-upPublished 27 April 20251 post View source →

Linux Kernel Exploitation - Setup

In this post, I will explain how to build and debug the Linux kernel.

Linux Kernel Debugging

Write-upPublished 10 April 20251 post View source →