PDS

Posted by [email protected] on September 5, 2022

Rewarded By Google&&Qualcomm Security Bulletin 2020

2020 挖到的受谷歌高通等厂商公开致谢漏洞汇总

publicly credited by Google 2020 Feb CVE-2020-0005 March CVE-2019-10584 CVE-2020-0055 CVE-2020-0056 CVE-2020-0057 CVE-2020-0058 CVE-2020-0059 April CVE-2020-0068 May ...

Posted by [email protected] on June 5, 2020

setup ubuntu qemu guest with custom kernel and debug it with gdb

ubuntu host and guest, qemu vm, x86-64 kernel

需要在多个linux内核版本上调试代码，因此需要快速搭建基于多种内核版本的调试环境 Kernel 用主线代码, git 下载 git clone https://github.com/torvalds/linux.git $KERNEL 用 ubuntu 维护的内核代码, 下载对应版本的源码包并解压,　比如 ubuntu20.04 对应的源码包为　linux-source-5.4....

Posted by jiayy on May 13, 2020

Android&linux vuln hunting and exploit

talk at pengchenglab of shenzhen

今天，受邀到深圳鹏城实验室做交流，讲课题目是漏洞挖掘与利用演讲 PPT

Posted by jiayy on January 14, 2020

Rewarded By Google&&Qualcomm Security Bulletin 2019

2019 挖到的受谷歌高通等厂商公开致谢漏洞汇总

publicly credited by Qualcomm 2019 CVE-2018-11905 CVE-2018-5883 CVE-2018-5911 CVE-2019-2312 CVE-2019-2314 CVE-2019-10542 CVE-2019-10563 CVE-2019-2302 CVE-2019-10584 publicly c...

Posted by [email protected] on December 5, 2019

PTRACE_TRACEME 本地提权漏洞解析

CVE-2019-13272 漏洞原理与利用

PTRACE_TRACEME 本地提权漏洞 author: Gengjia Chen ([email protected]) of IceSword Lab, qihoo 360 PTRACE_TRACEME 漏洞是 Jann Horn 201907 月发现的内核提权漏洞, 漏洞发现和利用的思路有很多值得学习的地方, 本文记录了个人的学习过程漏洞补丁我们从漏洞补丁 p...

Posted by Gengjia Chen ([email protected]) on November 28, 2019

qemu 逃逸漏洞解析

CVE-2015-5165 和 CVE-2015-7504 漏洞原理与利用

前言环境准备准备 qemu 准备 guest os 调试虚拟机的方法获取 poc 代码 cve-2015-5165 漏洞分析 cve-2015-5165 的 poc cve-2015-5165 的利用获取 .text 地址获取 phy_mem 地址 ...

Posted by jiayy on April 15, 2019

TLB 缓存延迟刷新漏洞解析

CVE-2018-18281 漏洞原理与利用

TLB 缓存延迟刷新漏洞简介最近, 业内发现了一批内存管理系统的漏洞, project 0 的 Jann Horn 放出了其中一个漏洞 CVE-2018-18281 的 writeup, CVE-2018-18281 是一个 linux kernel 的通用漏洞, 这个漏洞的模式比较罕见, 不同于常规的内存溢出类漏洞, 也不是常见的 UAF 漏洞, 它是由内存管理系统的底层逻辑错误...

Posted by jiayy on February 15, 2019

How to bypass PXN

Mosec2016

I used to give a talk at mosec 2016 about how to bypass PXN, here is the report: bypass-pxn.pdf 绕过pxn.pdf

Posted by jiayy on November 6, 2018

Linux Security Submit USA 2018

Some new features of kernel security

Yesterday (20180827) on the Linux Security Submit USA 2018, Jeff Vander Stoep and Sami Tolvanen from Google brought their talk Year in Review: Android Kernel Security In this talk, they released s...

Posted by jiayy on August 28, 2018

PDS

vulnerabilities rewarded publicly

挖到的受谷歌高通等厂商公开致谢漏洞汇总