Just published a post on exploiting CVE-2024-0582, a vulnerability in the Linux kernel that remained unpatched in Ubuntu for over two months. Hope you enjoy it!
https://t.co/yG7fG3pImw
CFP is open for SAFACon Party! This is your chance to share your coolest research at an exclusive, invite-only conference. Sunshine, spanish vibes, food, drinks, party, heated VR debates are guaranteed. All your favorite VR folks will be there, so should you. Ping me for details
It's official - #SAFACon 2026 will be held on the 8th of May in a secret location around Barcelona. Invites coming out from January, stay tuned for more info...
Our team discovered CVE-2025-13032, an LPE in the Avast sandbox driver! Read the story of a SYSTEM token heist involving a break-in and escape from the antivirus sandbox. Full details: https://t.co/UzxwvrT3C1
#CVE#LPE#Antivirus#KernelExploit#WindowsSecurity
Say hello to Eternal Tux🐧, a 0-click RCE exploit against the Linux kernel from KSMBD N-Days (CVE-2023-52440 & CVE-2023-4130)
https://t.co/Cbk9MBo91v
Cheers to @u1f383 for finding these CVEs + the OffensiveCon talk from gteissier & @laomaiweng for inspiration!
My new article: "Kernel-hack-drill and a new approach to exploiting CVE-2024-50264 in the Linux kernel"⚡️
I tell a bug collision story and introduce my pet project kernel-hack-drill, which helped me to exploit the hard bug that received @PwnieAwards 2025
https://t.co/0DJzCJYEfm
Documented instructions for setting up KGDB on Pixel 8.
Including getting kernel log over UART via USB-Cereal, building/flashing custom kernel, breaking into KGDB via /proc/sysrq-trigger or by sending SysRq-G over serial, dealing with watchdogs, etc.
https://t.co/vb4mgLDJrl
with offensivecon around the corner, i figured id write another post on linux kernel exploitation techniques - this time i cover the world of page table exploitation! enjoy 🤓
https://t.co/dqW9eMJkVI
We are back😎 Say hello to our kernelCTF submission for CVE-2025-37752🩸
Who would have thought you could pwn a kernel with just a 0x0000 written 262636 bytes out of bounds?
Read the full writeup at: https://t.co/GkpCjamlaZ 👀
@pinkflawd@zlowram_ Not exactly a Linux OS bible, but I really like Linux Kernel Programming by Kaiwan N Billimoria. Imho it's a great resource to understand the main building blocks of the OS without getting lost, and it reads very well.
ngl gang i might have got a bit lost in the sauce with this one, but if you're curious about how mmap() is implemented, check out part 2 of my memory management linternals series
https://t.co/Wr9X60zW1I
🚨 New Blog Post: Exploiting CVE-2024-0582 via the Dirty Page Table Method!
Discover how dangling pages can corrupt Page Table Entries (PTEs) and redirect user-space memory to kernel-space.
Read the full analysis: https://t.co/v0ftRqYkZB
#ExploitDevelopment#KernelSecurity
Slides of my talk at #Zer0Con2025!
⚡️ Kernel-Hack-Drill: Environment For Developing Linux Kernel Exploits ⚡️
I presented the kernel-hack-drill open-source project and showed how it helped me to exploit CVE-2024-50264 in the Linux kernel.
Enjoy!
https://t.co/84DqT4rdvm
Just saw it mentioned on LWN, handy site for checking which distros enable a certain config option: https://t.co/vIJhYoqSXQ... Just replace UTS_RELEASE with whatever config option name minus CONFIG_, for example: https://t.co/L8QGPAYwGF...