https://duasynt.com/feed.atom 2020-09-04T00:00:00+10:05 DUASYNT Information Security - https://duasynt.com/training_register 2022-04-03T09:00:00+10:05 trainings@duasynt.com

6 - 9 June 2022 (7am - 3pm UTC) / ONLINE delivery

2022-04-03T09:00:00+10:05 https://duasynt.com/blog/linux-kernel-heap-feng-shui-2022 2022-05-10T14:50:00+10:05 Michael S, Vitaly Nikolenko

Linux kernel heap feng shui in 2022

2022-05-10T14:50:00+10:05 https://duasynt.com/blog/android-pgd-page-tables 2020-12-21T18:40:00+10:05 Vitaly Nikolenko

Locating the kernel PGD / swapper_pg_dir on Android/arm64 as a post-exploitation technique

2020-12-21T18:40:00+10:05 https://duasynt.com/blog/android-uao-kernel-expl-mitigation 2020-09-04T18:10:00+10:05 Vitaly Nikolenko

UAO (User Access Override) implementation details in the Linux/Android kernel as mitigation against the addr_limit overwrite kernel exploitation technique

2020-09-04T18:10:00+10:05 https://duasynt.com/blog/samsung-s20-rkp-selinux-disable 2020-08-13T20:50:00+10:05 Vitaly Nikolenko

Samsung S20 RKP misconfiguration allowing trivial SELinux bypass

2020-08-13T20:50:00+10:05 https://duasynt.com/blog/google-pixel-uart-serial-cable 2017-01-10T19:10:00+10:05 Vitaly Nikolenko

2017-01-10T19:10:00+10:05 https://duasynt.com/blog/ms14-068-exploitation-pentest 2014-12-10T20:46:00+10:05 Vitaly Nikolenko

MS14-068 exploitation to gain domain Administrator privileges

2014-12-10T20:46:00+10:05 https://duasynt.com/blog/linux-kernel-heap-spray 2018-10-23T21:38:00+10:05 Vitaly Nikolenko

Universal Linux kernel heap spray

2018-10-23T21:38:00+10:05 https://duasynt.com/blog/cve-2016-6187-heap-off-by-one-exploit 2016-10-16T20:38:00+10:05 Vitaly Nikolenko

CVE-2016-6187 heap off-by-one exploit

2016-10-16T20:38:00+10:05 https://duasynt.com/blog/vmware-linux-poc 2016-06-13T12:10:00+10:05 Vitaly Nikolenko

VMware + Linux 3.x 0day

2016-06-13T12:10:00+10:05 https://duasynt.com/blog/cve-2016-0728-poc-not-working 2016-01-22T11:38:00+10:05 Vitaly Nikolenko

Public CVE-2016-0728 exploit not working?

2016-01-22T11:38:00+10:05 https://duasynt.com/blog/linux-kernel-rop-part1 2016-01-17T17:39:00+10:05 Vitaly Nikolenko

In part 1 of this tutorial we demonstrate how a Linux kernel ROP chain can be constructed to elevate user privileges

2016-01-17T17:39:00+10:05 https://duasynt.com/blog/cve-2014-4699-linux-kernel-ptrace-sysret-analysis 2014-07-21T18:52:00+10:05 Vitaly Nikolenko

Exploitation of the CVE-2014-4699 sysret Linux kernel vulnerability

2014-07-21T18:52:00+10:05 https://duasynt.com/blog/cve-2014-4014-local-privilege-escalation 2014-06-19T18:23:00+10:05 Vitaly Nikolenko

Exploitation of CVE-2014-4014: incorrect use of inode_capable() in user namespaces

2014-06-19T18:23:00+10:05 https://duasynt.com/blog/vmware-hardware-version-exploit-dev 2014-06-07T14:19:00+10:05 Vitaly Nikolenko

VMware hardware versions prior to 9 do not support SMEP even if the CPU supports it

2014-06-07T14:19:00+10:05 https://duasynt.com/blog/linux-kernel-exploit-not-working 2014-06-04T21:21:00+10:05 Vitaly Nikolenko

If your Linux kernel exploit not working, check if SMEP is supported by your CPU

2014-06-04T21:21:00+10:05 https://duasynt.com/blog/cve-2014-2851-group_info-use-after-free-exploitation 2016-01-02T00:10:00+10:05 Vitaly Nikolenko

This is a case study for the use-after-free vulnerability which was assigned CVE-2014-2851 and affected Linux kernels through 3.14.1

2016-01-02T00:10:00+10:05 https://duasynt.com/blog/cve-2014-4943-pppol2tp-dos-analysis 2015-10-01T18:38:00+10:05 Vitaly Nikolenko

CVE-2014-4943 PPPoL2TP vulnerability DoS analysis - exploiting differences between PPPoL2TP and UDP sockets

2015-10-01T18:38:00+10:05 https://duasynt.com/blog/linux-kernel-module-autoloading 2019-07-23T14:29:00+10:05 Michael S

Brief introduction to the Linux kernel autoloading process which significantly increases the kernel attack surface

2019-07-23T14:29:00+10:05 https://duasynt.com/blog/cve-2019-2215-android-binder-uaf-s9 2020-01-04T12:21:00+10:05 Michael S

Binder exploit on Samsung S9 devices

2020-01-04T12:21:00+10:05 https://duasynt.com/blog/ubuntu-centos-redhat-privesc 2020-01-15T16:38:00+10:05 Vitaly Nikolenko

Ubuntu 18.04 16.04 14.04 / CentOS 8 / RHEL 8 kernel local privilege escalation

2020-01-15T16:38:00+10:05