0x9000 · Kernel Exploitation
KASLR, KPTI and Modern Kernel Defenses
Kernel address randomization, page-table isolation, and the config options that harden a Linux kernel against memory-corruption exploits — what each one stops and how to enable it.
Guides tagged: #kernel
0x9000 · Kernel Exploitation
Kernel Exploitation: From a Bug to root
A kernel memory-corruption bug is about privilege, not a shell. The credential model, the commit_creds(prepare_kernel_cred(0)) payload, and returning cleanly to userspace — in a lab VM.
0x9000 · Kernel Exploitation
ret2usr, SMEP and SMAP
The kernel once trusted userspace memory, so exploits just pointed kernel execution at a user payload. SMEP and SMAP ended that — and how kernel ROP works around them.