corpus.blog
56,966 blogs · 4,417,066 posts Claim your blog
Record · corpus.blog/posts/01a08c62-f4fa-71da-94af-497e98a62df2

Reviving Exploits Against Cred Structs - Six Byte Cross Cache Overflow to Leakless Data-Oriented Kernel Pwnage

willsroot.io · published 17 August 2022

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at willsroot.io Wayback capture
4blogs citing
First cited
17 Aug 2022
Most recent
29 Apr 2025
Rank this month
not ranked
Links from this post
29
Words captured
5,325

Cited by

Blog
In the post
Date
r1ru.github.io
Linux Kernel Exploitation - DirtyCred Read at the source ↗
29 Apr 2025
sam4k.com
Exploring Linux's New Random Kmalloc Caches Read at the source ↗
3 Nov 2023
klecko.github.io
BFS Ekoparty 2022 Kernel exploitation challenge write-up Read at the source ↗
25 Nov 2022
syst3mfailure.io
[corCTF 2022] CoRJail: From Null Byte Overflow To Docker Escape Exploiting poll_list Objects In The Linux Kernel Read at the source ↗
17 Aug 2022

Links from this post

Link
Host
https://syst3mfailure.io/
syst3mfailure.io
https://www.willsroot.io/2021/08/corctf-2021-fire-of-salvation-writeup.html
willsroot.io
[corCTF 2021] Wall Of Perdition: Utilizing msg_msg Objects For Arbitrary Read And Arbitrary Write In The Linux Kernel Read at the source ↗
syst3mfailure.io
[corCTF 2022] CoRJail: From Null Byte Overflow To Docker Escape Exploiting poll_list Objects In The Linux Kernel Read at the source ↗
syst3mfailure.io
https://elixir.bootlin.com/linux/v5.18.3/source/fs/select.c
elixir.bootlin.com
https://github.com/Crusaders-of-Rust/corCTF-2022-public-challenge-archive/tree/master/pwn/cache-of-castaways
github.com
https://duasynt.com/blog/linux-kernel-heap-feng-shui-2022
duasynt.com
https://elixir.bootlin.com/linux/latest/source/mm/slab_common.c
elixir.bootlin.com
https://etenal.me/archives/1825
etenal.me
https://grsecurity.net/how_autoslab_changes_the_memory_unsafety_game
grsecurity.net
https://xidoo.top/2021/08/slab_buddy_system0/
xidoo.top
https://ruia-ruia.github.io/2022/08/05/CVE-2022-29582-io-uring/
ruia-ruia.github.io
https://elixir.bootlin.com/linux/latest/source/mm/slub.c
elixir.bootlin.com
https://elixir.bootlin.com/linux/v5.18.3/source/include/linux/cred.h
elixir.bootlin.com
https://googleprojectzero.blogspot.com/2017/05/exploiting-linux-kernel-via-packet.html
googleprojectzero.blogspot.com
https://elixir.bootlin.com/linux/v5.18.3/source/net/packet/af_packet.c
elixir.bootlin.com
https://elixir.bootlin.com/linux/v5.18.3/source/kernel/fork.c
elixir.bootlin.com
https://elixir.bootlin.com/linux/v5.18.3/source/mm/vmalloc.c
elixir.bootlin.com
https://elixir.bootlin.com/linux/v5.18.3/source/kernel/cred.c
elixir.bootlin.com
https://linux.die.net/man/2/clone
linux.die.net
https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhQ8hmT1HV4d2ClVuXOPiwGzqyk1RlkSH_nGDMtTc4N7II-XlfuzIAMIkIMt8EZttm1-mLOHKCbbFyMqNYoCb_6SX3RuCUNkUyHvSp-RX9EsKv5qkmN5xZYHCw5Z0HwHyldwLvoyAtP-9yzmUGNnsTc74VQcRRkWBo8wxc4wcaF_Ln0RFJkVSt4DgRF_g/s600/challenge.gif
blogger.googleusercontent.com
https://kylebot.net/
kylebot.net
https://twitter.com/pqlqpql
twitter.com
https://elixir.bootlin.com/linux/v5.18.3/source/kernel/sched/core.c
elixir.bootlin.com
https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgCw6KTwl2iw2uyE4VUZC8xcGjWFNd7ogoBo_xCrvAWxcWpYUeFl0jAByo1p7benkQCar60vrRFWq7mY8UoU-f4XbRtTE1giCqsjm9ksZtQqcNqTPMF4wjYxU32LCe0JvW7MJJaaTfeP4CMD9fUYyVWT2NSw0WDRkpBUnBSpcOaeGC9m5gHBy1UZAuLMQ/s600/ubuntu.gif
blogger.googleusercontent.com
https://twitter.com/Markak_
twitter.com
https://forum.defcon.org/node/241933
forum.defcon.org
https://twitter.com/_0xTen
twitter.com
https://i.blackhat.com/USA-22/Thursday/US-22-Lin-Cautious-A-New-Exploitation-Method.pdf
i.blackhat.com