Himanshu Khokhar Jaat

Vulnerability Researcher and Exploit Developer

[Andrey Konovalov @andreyknvl]

The "Randomized slab caches for kmalloc()" patch was merged into mainline.

With CONFIG_RANDOM_KMALLOC_CACHES=y, each kmalloc cache is split into 16. kmalloc uses a random one for each allocation based on the code location. Choices change every reboot.

https://t.co/EoSYZxc8gI

[Andrey Konovalov @andreyknvl]

Updates for the Linux kernel exploitation collection.

https://t.co/8T4WCiAzlR

[c0m0r1 @c0m0r1]

CVE-2023-3390: UAF on Linux Netfilter nftables MFT_MSG_NEWRULE leads to LPE.
We exploit this tiny 1-day vuln to pwn all targets of Google's kernelCTF for the first time in history.
Nice and clear triple-kill 🥳

[Eduardo Vela @sirdarckcat]

lol 9 Linux Kernel exploits in 6 minutes. #kernelCTF @koczkatamas https://t.co/n3e7T9hVLC

[Himanshu Khokhar Jaat @rwprimitive]

Will be delivering a 1 day workshop on Linux Kernel Exploitation as a way of giving it back to the community. It's free to attend and join.

[Seasides @seasides_conf]

We r extremely delighted to announce a premium content & advanced level training on Linux kernel exploitation by @rwprimitive . Details on below link:
https://t.co/myfFoew3Bb

This training is sponsored by @EnciphersLabs .Thank you @0ctac0der for supporting us. #infosec #cybersec

[Exodus Intelligence @XI_Research]

One of our elite researchers @sherl0ck__ wrote up some great work on Apple Safari:
https://t.co/642ea6OZ7d

#vulnerability #Exploit #whitehat #CyberSecurity

[0xor0ne @0xor0ne]

Excellent blogpost by @Synacktiv on Android heap allocator jemalloc (version >= 5)

https://t.co/3LmhPmCXrk

#infosec #exploit #android

[Bien 🇻🇳 @bienpnn]

PoC for CVE-2023-31248.
This was used to exploit Ubuntu Desktop at Pwn2Own Vancouver 2023.
https://t.co/lAnlhyHn5b

[0xor0ne @0xor0ne]

Nice blog post on exploiting VirtualBox on Windows (CVE-2023-21987 and CVE-2023-21991)

https://t.co/E3vPy2raRR

#virtualbox #infosec

[0xor0ne @0xor0ne]

Type confusion in Safari browser (analysis of CVE-2022-42856)

https://t.co/6NQT9xSz2v

#cybersecurity

[Linux Kernel Security @linkersec]

UNCONTAINED: Uncovering Container Confusion in the Linux Kernel

A paper by @JakobKoschel, @borrello_pietro, et al. about finding type confusion bugs in container_of invocations.

Paper: https://t.co/EGWUE00Lup
Overview: https://t.co/eusc5xNI95

[0xor0ne @0xor0ne]

Bare metal firmware reverse engineering
Introduction series by @RagnarSecurity

Part 1: https://t.co/is6MwpHQCy
Part 2: https://t.co/T954DxOcbS
Part 3: https://t.co/T954DxOcbS

#iot #embedded #reverseengineering #infosec #cybersecurity

[Andy Nguyen @theflow0]

Yet another Linux kernel exploitation write-up!

CVE-2021-22555: Turning \x00\x00 into 10000$

https://t.co/Rwb26sGljK

[0xor0ne @0xor0ne]

Great blog post for learning a bit more about Linux kernel internals
Scheduling and context switch in ARM32

https://t.co/ScNcbuzh6W

#Linux #kernel #learning

[0xor0ne @0xor0ne]

VirtualBox internals and exploitation (CVE-2023-21987 and CVE-2023-21991)
Credits @qriousec

https://t.co/E3vPy2raRR

#infosec #cybersecurity #cve #virtualbox

[Petr Beneš @PetrBenes]

Fun fact: 5 years ago someone proposed a patch to QEMU so that it has a built-in WinDBG support.

https://t.co/OiV3t6u6BC

It was apparently rejected.

However it can be found here, for those interested: https://t.co/Xhi0MTBBZO

[0xor0ne @0xor0ne]

Introduction to embedded firmware emulation for security analysis using QEMU
Great content by @olivier_boschko

https://t.co/mtHe1RRyjn

#qemu #emulation #iot #embedded #infosec

[chompie @chompie1337]

“io_uring vulnerabilities were used in ALL the submissions which bypassed our mitigations.”

sounds about right

https://t.co/40JCS7bf6L

[Blue Frost Security @bluefrostsec]

CVE-2023-2008 - Analyzing and exploiting a bug in the udmabuf driver by @dialluvioso_ and @esanfelix https://t.co/I4rqlpkcSx

[Himanshu Khokhar Jaat @rwprimitive]

https://t.co/7zGsemHkx9