0x8000 · ARM64 Exploitation
PAC and BTI: ARM's Answer to Code Reuse
Pointer authentication signs return addresses so a forged one faults; BTI forces indirect branches onto landing pads. How both work, how to enable and verify them, and their limits.
Guides tagged: #bti
0x2000 · Exploit Mitigations
Control-Flow Integrity: CFI, Intel CET and Arm PAC/BTI
How forward-edge and backward-edge control-flow integrity work, from Clang CFI and Microsoft CFG to Intel CET shadow stacks and Arm pointer authentication, and their limits.