Saturday, January 28, 2012

Writing kernel exploits

Yesterday I gave a talk about writing kernel exploits. I've posted the slides [PDF]. Here is the original description:

Did you know that a NULL pointer can compromise your entire system? Do you know how UNIX pipes, multithreading, and an obscure network protocol from 1981 are combined to take over Linux machines today? OS kernels are full of strange and interesting vulnerabilities, thanks to the subtle nature of systems code. And the kernel's ultimate authority is the ultimate prize for an attacker.

In this talk you will learn how kernel exploits work, with detailed code examples. Compared to userspace, exploiting the kernel requires a whole different bag of tricks, and we'll cover some of the most important ones. We will focus on Linux systems and x86 hardware, though most ideas will generalize. We'll start with a few toy examples, then look at some real, high-profile Linux exploits from the past two years.

You will also see how to protect your own Linux machines against kernel exploits. We'll talk about the continual cat-and-mouse game between system administrators and those who would attack even hardened kernels.

Thanks again to SIPB for giving me a venue to talk about whatever I find interesting.

29 comments:

  1. I'm surprised that computers are still able to work at all.

    ReplyDelete
  2. Thank you, I really enjoyed reading your slides!

    ReplyDelete
  3. Nice presentation! Please keep posting stuff like this in the future :)

    Also... where was this given? Was there more material like this?

    ReplyDelete
  4. Interesting slides. Is there a recording of the talk?

    ReplyDelete
  5. It's really nice to read! Thanks for sharing the information, Keegan!

    ReplyDelete
  6. Nice article, thanks for the information. It's very complete information. I will bookmark for next reference
    jaring futsal | jaring golf | jaring pengaman proyek |
    jaring pengaman bangunan | jaring pengaman gedung
    http://www.jual-jaring.blogspot.com/
    http://www.agen-jaring.blogspot.com/
    http://www.pancasamudera-safetynet.blogspot.com/
    http://www.toko-jaring.blogspot.com/
    http://www.pusat-jaring.blogspot.com/
    http://jualjaringpengaman.blogspot.com/
    https://pancasamudera.wordpress.com/
    https://pasangjaringfutsal.wordpress.com/
    https://jualtambangmurah.wordpress.com/
    https://tokojaring.wordpress.com/
    https://jualjaringfutsal.wordpress.com/
    https://jaringfutsal.wordpress.com/


    ReplyDelete
  7. I love it. I hope that more and more Blogger will use this feature in the future, because it just makes the internet better I think!
    Voot Apk Download Free
    Bigg Boss Season 10 Watch Online
    Google Play Store Apk Download Free
    JioPlay APK Download

    ReplyDelete

  8. Thank you for sharing in this article
    I can learn a lot and could also be a reference
    I am happy to find your website and can join to comment

    Share and Klick Info Blokwalking. Hammer Of Thor
    => Jual Hammer Of Thor Di Bogor
    => Jual Hammer Of Thor Di Medan
    => Jual Hammer Of Thor Di Semarang
    => Jual Hammer Of Thor Di Bandung
    => Jual Hammer Of Thor Di Bandar Lampung
    Obat Good Man | Obat pembesar penis | Vimax Asli | Vimax Extender


    ReplyDelete
  9. Great post! I didn’t knowral of these resources and I’m going to go check them out now!

    ReplyDelete
  10. This comment has been removed by the author.

    ReplyDelete
  11. How to open apk files on several devices

    ReplyDelete
  12. Packers and Movers Bangalore - Reliable and Verified Household Shifting Service Providers Give Reasonable ###Packers and Movers Charges. Cheap and Best Office Relocation Compare Quotation for Assurance for Local and Domestic House Shifting and Get estimates today to save upto 20%, ***Read Customer Reviews - @ Packers And Movers Bangalore

    ReplyDelete
  13. Packers and Movers Chennai Give Safe and Reliable ***Household Shifting Services in Chennai with Reasonable ###Packers and Movers Price Quotation. We Provide Household Shifting, Office Relocation, ✔✔✔ Local and Domestic Transportation Services, Affordable and Reliable Shifting Service Charges @ Packers And Movers Chennai

    ReplyDelete
  14. Thanks for sharing excellent informations. Your web site is very cool. I am impressed by the details that you’ve on this site. 야설

    Also visit my web site;
    야설

    ReplyDelete
  15. Admiring the time and energy you put into your blog and in depth information you offer. It's good to come across a blog every once in a while that isn't the same outdated rehashed material. Fantastic read! I've bookmarked your site 일본야동
    Also visit my web site 일본야동


    ReplyDelete
  16. This web site certainly has all of the information and facts I needed concerning this subject and didn't know who to ask. 국산야동
    Also visit my web site 국산야동

    ReplyDelete
  17. I would like to thank you for the efforts you have made in writing this article. I am hoping the same best work from you in the future as well. 일본야동
    Also visit my web site 일본야동

    ReplyDelete
  18. I have read your blog it is very helpful for me. I want to say thanks to you. I have bookmark your site for future updates.
    야설
    Also visit my web site 야설

    ReplyDelete
  19. I’m gone to inform my little brother, that he should also pay a quick visit this blog on regular basis to obtain updated from most recent
    news.먹튀검증

    ReplyDelete