voidsecurity
Yet another blog by a security enthusiast !
Vulnerabilities
(Move to ...)
Writeups
List of Vulnerabilities
Papers and other blogs
▼
Tuesday, August 28, 2018
From Compiler Optimization to Code Execution - VirtualBox VM Escape - CVE-2018-2844
›
Oracle fixed some of the issues I reported in VirtualBox during the Oracle Critical Patch Update - April 2018. CVE-2018-2844 was an inter...
10 comments:
Saturday, August 11, 2018
Real World CTF - kid_vm
›
kid_vm is a KVM API based challenge. The provided user space binary uses KVM ioctl calls to setup guest and execute guest code in 16-bit...
Sunday, July 2, 2017
Google CTF – Pwnables - Inst Prof
›
Summary of Exploitation: Leak CPU Time Stamp Counter (TSC) Predict TSC values Leak ELF base address using predicted TSC values Re...
Tuesday, April 19, 2016
Plaid CTF 2016 - Fixedpoint
›
The binary simply reads integers from user, performs floating point operations on it and stores it in a mmap'ed region with RW...
1 comment:
Plaid CTF 2016 - Butterfly
›
butterfly is a 64 bit executable with NX and stack canaries enabled. [+] The binary reads 50 bytes through fgets, converts it t...
Wednesday, February 3, 2016
HackIM CTF 2016 - Exploitation 300 - Cman
›
Cman is a 64 bit statically linked and stripped ELF without NX protection. I used IDA's sigmake to generate libc signatures f...
3 comments:
HackIM CTF 2016 - Exploitation 200 - Sandman
›
sandman is a 64 bit ELF without much memory protections $ checksec --file ./sandman RELRO STACK CANARY NX ...
‹
›
Home
View web version