Hi @discord! We are hosting @ecsc2024 right now and we have our IP banned, we opened a ticket without answers, can you please write us? DM or [email protected] ⚠️
Since we are on the home stretch, we will close the challenge on the 7/10/2022 at 20:00 GMT so you'd better hurry😊
We also have our first winner in the student category: @Bonfee1! A big shout out to him, he won fair and square his entry to Hexacon and hotel stay!
#HEXACON2022
Another Ubuntu 21.10 LPE :)
This bug doesn't even have a CVE yet. To pwn it I used the same technique described here: https://t.co/zSl67mBPm9.
I'll clean the code just a bit, before releasing it
@raesene@Terenceliqiang With the proper ropchain yes. If you are talking specifically about google kctf, then no because the kernel is compiled without the required CONFIG_ :(
CVE-2022-25636 exploit - LPE on Ubuntu 21.10, using the FUSE technique ( which i first saw from @cor_ctf ).
I also developed an exploit which is not using FUSE, but for now: https://t.co/dK1FowNcOG.
I'll soon publish a writeup with the exploitation details.