Record · corpus.blog/posts/01a08c62-f4fa-71da-94af-497e96298cd7

corCTF 2023 sysruption - Exploiting Sysret on Linux in 2023

willsroot.io · published 3 August 2023

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at willsroot.io Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
Links from this post: 25
Words captured: 2,858

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

https://github.com/torvalds/linux/commit/7bf36bbc5e0c09271f9efe22162f8cc3f8ebd3d2

github.com

https://nvd.nist.gov/vuln/detail/cve-2012-0217

nvd.nist.gov

https://fail0verflow.com/blog/2012/cve-2012-0217-intel-sysret-freebsd/

fail0verflow.com

https://xenproject.org/2012/06/13/the-intel-sysret-privilege-escalation/

xenproject.org

https://duasynt.com/blog/cve-2014-4699-linux-kernel-ptrace-sysret-analysis

duasynt.com

corCTF 2023: sysruption writeup Read at the source ↗

zolutal.github.io

http://csg.csail.mit.edu/6.S983/

csg.csail.mit.edu

https://www.kb.cert.org/vuls/id/649219

kb.cert.org

https://lore.kernel.org/lkml/CALCETrUQtHLLEHqq=PJdf7QDUP_RjbS2szKgHa210+VMgotsPg@mail.gmail.com/T/

lore.kernel.org

https://github.com/vnik5287/cve-2014-4699-ptrace/blob/master/poc_v0.c

github.com

https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=b9cd18de4db3c9ffa7e17b0dc0ca99ed5aa4d43a

git.kernel.org

https://lore.kernel.org/all/CAMzpN2i+DrKkzDyiS6Cj61LmCu+--e5puQpKrNxYVMDRPMvvBw@mail.gmail.com/T/

lore.kernel.org

EntryBleed: Breaking KASLR under KPTI with Prefetch (CVE-2022-4543) Read at the source ↗

willsroot.io

https://googleprojectzero.blogspot.com/2022/12/exploiting-CVE-2022-42703-bringing-back-the-stack-attack.html

googleprojectzero.blogspot.com

https://gruss.cc/files/prefetch.pdf

gruss.cc

https://elixir.bootlin.com/linux/v6.3.4/source/arch/x86/mm/pti.c

elixir.bootlin.com

https://elixir.bootlin.com/linux/v6.3.4/source/arch/x86/entry/entry_64.S

elixir.bootlin.com

https://elixir.bootlin.com/linux/v6.3.4/source/arch/x86/kernel/process_64.c

elixir.bootlin.com

https://www.intel.com/content/www/us/en/developer/articles/technical/software-security-guidance/best-practices/guidance-enabling-fsgsbase.html

intel.com

https://elixir.bootlin.com/linux/v6.3.4/source/mm/percpu.c

elixir.bootlin.com

https://www.kernel.org/doc/Documentation/x86/x86_64/mm.txt

kernel.org

https://ruia-ruia.github.io/2022/08/05/CVE-2022-29582-io-uring/

ruia-ruia.github.io

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgjAcUiuYEopYBfYCk1IqxWFONjV-k1vfeveEGLol7ESAsZseJ9ebCoMy54NzObP6roMDYEKkROfFyDmE1SvZubmK8knHo7hNtQAo9jyJH8DIQlnj4WupkieaHufbAr-DhTr8z1RmDphClRjQXXm-bi07ul1Nb77UQHqYygQqgh5g2VtFdkwWgMUn0qAnr9/s1000/sysruption.gif

blogger.googleusercontent.com

https://twitter.com/sampriti0

twitter.com

https://balsn.tw/

balsn.tw