Kpwn tecniques: modprobe_path
modprobe_path is a global variable that in most kernels is RW. This variable is contains a path to an executable, do you see where this is going..?
modprobe_path is a global variable that in most kernels is RW. This variable is contains a path to an executable, do you see where this is going..?
msg_msg is a really powerful and elastic kernel struct that can be abused to obtain strong primitives, such as arbitrary read/write/free.
Ret2dlresolve is a really powerful tecnique to use in pwn challenges (even tho it’s not frequently seen). It’s useful when we don’t have libc leaks or don’t know the libc version.
DestructiveFarm is a popular tool used in CTFs and what it does is running exploits every tick to retrieve flags and automatically submit them to the checker.
Tulip is a traffic analyzer tool made for A/D CTFs, this post walks you throught all the important steps requied to deploy Tulip painlessly (hopefully).