r0 Crew (Channel)

Phrack 2021, Issue 0x46

* Attacking JavaScript Engines: A case study of JavaScriptCore and CVE-2016-4622
* Cyber Grand Shellphish
* VM escape - QEMU Case Study
* .NET Instrumentation via MSIL bytecode injection
* Twenty years of Escaping the Java Sandbox
* Viewer Discretion Advised: (De)coding an iOS Kernel Vulnerability
* Exploiting Logic Bugs in JavaScript JIT Engines
* Hypervisor Necromancy; Reanimating Kernel Protectors
* Tale of two hypervisor bugs - Escaping from FreeBSD
* The Bear in the Arena
* Exploiting a Format String Bug in Solaris CDE
* Segfault[.]net eulogy

http://phrack.org/issues/70/1.html

#magazine #expdev #net #msil #java #vm #javascript #hypervisor #darw1n

Phrack

Introduction

Click to read the article on phrack

👍1

8.82K viewsedited 15:38

👍 9 ❤️ 12

r0 Crew (Channel)

One I/O Ring to Rule Them All: A Full Read/Write Exploit Primitive on Windows 11

https://windows-internals.com/one-i-o-ring-to-rule-them-all-a-full-read-write-exploit-primitive-on-windows-11/

https://github.com/yardenshafir/IoRingReadWritePrimitive

#expdev #windows #kernel #expolit #tips #Aligner

GitHub

GitHub - yardenshafir/IoRingReadWritePrimitive: Post exploitation technique to turn arbitrary kernel write / increment into full…

Post exploitation technique to turn arbitrary kernel write / increment into full read/write primitive on Windows 11 22H2 - yardenshafir/IoRingReadWritePrimitive

🔥9👍7

15.8K viewsedited 19:32

r0 Crew (Channel)

Dota 2 Under Attack: How a V8 Bug Was Exploited in the Game

https://decoded.avast.io/janvojtesek/dota-2-under-attack-how-a-v8-bug-was-exploited-in-the-game/

#gamehack #expdev #reverse #v8 #exploit

Gendigital

Dota 2 under attack: How a V8 bug was exploited in the game

Exploiting V8 in Popular Games

👍4🤔3

8.4K viewsedited 13:04

r0 Crew (Channel)

Dissecting and Exploiting TCP/IP RCE Vulnerability “EvilESP”

https://securityintelligence.com/x-force/dissecting-exploiting-tcp-ip-rce-vulnerability-evilesp/

#expdev #windows #1day

Security Intelligence

Dissecting and Exploiting TCP/IP RCE Vulnerability “EvilESP”

See how one IBM X-Force researcher reverse engineered the patch for CVE-2022-34718, and unpack the affected protocols, how the bug was identified, and how it was reproduced.

👍6👎2

5.39K viewsedited 22:49

r0 Crew (Channel)

Analysis of CVE-2023-29336 Win32k Privilege Escalation Vulnerability (with POC)

https://www.numencyber.com/cve-2023-29336-win32k-analysis/

#expdev #reverse #windows #poc

Numen

Analysis of CVE-2023-29336 Win32k Privilege Escalation

Analyzing CVE-2023-29336 Win32k vulnerability, its exploitation, and mitigation measures in the context of evolving security practices.

👍3❤1🎉1

5.06K viewsedited 11:40

r0 Crew (Channel)

Analyzing a Modern In-the-wild Android Exploit

https://googleprojectzero.blogspot.com/2023/09/analyzing-modern-in-wild-android-exploit.html

#expdev #android #linux

projectzero.google

Analyzing a Modern In-the-wild Android Exploit - Project Zero

By Seth Jenkins, Project ZeroIntroductionIn December 2022, Google’s Threat Analysis Group (TAG) discovered an in-the-wild exploit chain targeting Samsu...

🔥5

6.67K views10:03

r0 Crew (Channel)

CVE-2023-4047 Root Cause Analysis

https://www.richardosgood.com/posts/cve---2023---4047-root-cause-analysis/

#expdev #windows #1day #winrar

Richardosgood

CVE-2023-40477 Root Cause Analysis

Root cause analysis for CVE-2023-40477 with PoC

🔥3❤1👍1

6.19K views10:11

r0 Crew (Channel)

HEVD: How a simple K-TypeConfusion took me 3 months long to create a exploit? — Windows 11 (build 22621)

https://wafzsucks.medium.com/how-a-simple-k-typeconfusion-took-me-3-months-long-to-create-a-exploit-f643c94d445f

#expdev #windows #hevd #kaslr #smep

Medium

How a simple K-TypeConfusion took me 3 months long to create a exploit?

Have you ever tested something for a really long time, that it made part of your life? that’s what happen to me for the last months when a…

👍11❤1

10.1K views09:38

r0 Crew (Channel)

Local Privilege Escalation in the glibc's ld.so (CVE-2023-4911)

https://www.qualys.com/2023/10/03/cve-2023-4911/looney-tunables-local-privilege-escalation-glibc-ld-so.txt

POC: https://github.com/leesh3288/CVE-2023-4911

#expdev #linux #lpe #Alexs3y

GitHub

GitHub - leesh3288/CVE-2023-4911: PoC for CVE-2023-4911

PoC for CVE-2023-4911. Contribute to leesh3288/CVE-2023-4911 development by creating an account on GitHub.

🔥8👍4❤1

14.1K viewsedited 16:48

r0 Crew (Channel)

PatchaPalooza uses the power of Microsoft's MSRC CVRF API to fetch, store, and analyze security update data. Designed for cybersecurity professionals, it offers a streamlined experience for those who require a quick yet detailed overview of vulnerabilities, their exploitation status, and more. This tool operates entirely offline once the data has been fetched, ensuring that your analyses can continue even without an internet connection.

https://github.com/xaitax/PatchaPalooza

https://patchapalooza.com

#expdev #helpers #tools

GitHub

GitHub - xaitax/PatchaPalooza: A comprehensive tool that provides an insightful analysis of Microsoft's monthly security updates.

A comprehensive tool that provides an insightful analysis of Microsoft's monthly security updates. - xaitax/PatchaPalooza

👍2❤1

7.61K viewsedited 11:36

r0 Crew (Channel)

POC for trigerring CVE-2024-38063 (RCE in tcpip.sys)

https://github.com/ynwarcs/CVE-2024-38063

#expdev #poc

GitHub

GitHub - ynwarcs/CVE-2024-38063: poc for CVE-2024-38063 (RCE in tcpip.sys)

poc for CVE-2024-38063 (RCE in tcpip.sys). Contribute to ynwarcs/CVE-2024-38063 development by creating an account on GitHub.

❤10👍3

7.77K views15:13