Saturday, January 28, 2012

Writing kernel exploits

Yesterday I gave a talk about writing kernel exploits. I've posted the slides [PDF]. Here is the original description:

Did you know that a NULL pointer can compromise your entire system? Do you know how UNIX pipes, multithreading, and an obscure network protocol from 1981 are combined to take over Linux machines today? OS kernels are full of strange and interesting vulnerabilities, thanks to the subtle nature of systems code. And the kernel's ultimate authority is the ultimate prize for an attacker.

In this talk you will learn how kernel exploits work, with detailed code examples. Compared to userspace, exploiting the kernel requires a whole different bag of tricks, and we'll cover some of the most important ones. We will focus on Linux systems and x86 hardware, though most ideas will generalize. We'll start with a few toy examples, then look at some real, high-profile Linux exploits from the past two years.

You will also see how to protect your own Linux machines against kernel exploits. We'll talk about the continual cat-and-mouse game between system administrators and those who would attack even hardened kernels.

Thanks again to SIPB for giving me a venue to talk about whatever I find interesting.

57 comments:

  1. I'm surprised that computers are still able to work at all.

    ReplyDelete
  2. Thank you, I really enjoyed reading your slides!

    ReplyDelete
  3. Nice presentation! Please keep posting stuff like this in the future :)

    Also... where was this given? Was there more material like this?

    ReplyDelete
  4. Interesting slides. Is there a recording of the talk?

    ReplyDelete
  5. It's really nice to read! Thanks for sharing the information, Keegan!

    ReplyDelete
  6. Nice article, thanks for the information. It's very complete information. I will bookmark for next reference
    jaring futsal | jaring golf | jaring pengaman proyek |
    jaring pengaman bangunan | jaring pengaman gedung
    http://www.jual-jaring.blogspot.com/
    http://www.agen-jaring.blogspot.com/
    http://www.pancasamudera-safetynet.blogspot.com/
    http://www.toko-jaring.blogspot.com/
    http://www.pusat-jaring.blogspot.com/
    http://jualjaringpengaman.blogspot.com/
    https://pancasamudera.wordpress.com/
    https://pasangjaringfutsal.wordpress.com/
    https://jualtambangmurah.wordpress.com/
    https://tokojaring.wordpress.com/
    https://jualjaringfutsal.wordpress.com/
    https://jaringfutsal.wordpress.com/


    ReplyDelete
  7. I love it. I hope that more and more Blogger will use this feature in the future, because it just makes the internet better I think!
    Voot Apk Download Free
    Bigg Boss Season 10 Watch Online
    Google Play Store Apk Download Free
    JioPlay APK Download

    ReplyDelete

  8. Thank you for sharing in this article
    I can learn a lot and could also be a reference
    I am happy to find your website and can join to comment

    Share and Klick Info Blokwalking. Hammer Of Thor
    => Jual Hammer Of Thor Di Bogor
    => Jual Hammer Of Thor Di Medan
    => Jual Hammer Of Thor Di Semarang
    => Jual Hammer Of Thor Di Bandung
    => Jual Hammer Of Thor Di Bandar Lampung
    Obat Good Man | Obat pembesar penis | Vimax Asli | Vimax Extender


    ReplyDelete
  9. Great post! I didn’t knowral of these resources and I’m going to go check them out now!

    ReplyDelete
  10. This comment has been removed by the author.

    ReplyDelete
  11. How to open apk files on several devices

    ReplyDelete
  12. Packers and Movers Bangalore - Reliable and Verified Household Shifting Service Providers Give Reasonable ###Packers and Movers Charges. Cheap and Best Office Relocation Compare Quotation for Assurance for Local and Domestic House Shifting and Get estimates today to save upto 20%, ***Read Customer Reviews - @ Packers And Movers Bangalore

    ReplyDelete
  13. Packers and Movers Chennai Give Safe and Reliable ***Household Shifting Services in Chennai with Reasonable ###Packers and Movers Price Quotation. We Provide Household Shifting, Office Relocation, ✔✔✔ Local and Domestic Transportation Services, Affordable and Reliable Shifting Service Charges @ Packers And Movers Chennai

    ReplyDelete
  14. Thanks for sharing excellent informations. Your web site is very cool. I am impressed by the details that you’ve on this site. 야설

    Also visit my web site;
    야설

    ReplyDelete
  15. Admiring the time and energy you put into your blog and in depth information you offer. It's good to come across a blog every once in a while that isn't the same outdated rehashed material. Fantastic read! I've bookmarked your site 일본야동
    Also visit my web site 일본야동


    ReplyDelete
  16. This web site certainly has all of the information and facts I needed concerning this subject and didn't know who to ask. 국산야동
    Also visit my web site 국산야동

    ReplyDelete
  17. I would like to thank you for the efforts you have made in writing this article. I am hoping the same best work from you in the future as well. 일본야동
    Also visit my web site 일본야동

    ReplyDelete
  18. I have read your blog it is very helpful for me. I want to say thanks to you. I have bookmark your site for future updates.
    야설
    Also visit my web site 야설

    ReplyDelete
  19. I’m gone to inform my little brother, that he should also pay a quick visit this blog on regular basis to obtain updated from most recent
    news.먹튀검증

    ReplyDelete
  20. Hello there! Quick question that’s completely off topic.
    Do you know how to make your site mobile friendly? My website looks weird when viewing from my iphone.
    I’m trying to find a template or plugin that might
    be able to resolve this issue. If you have any recommendations, please share.
    Thank you!

    website:경마



    ReplyDelete
  21. This article gives the light in which we can observe the reality. This is very nice one and gives in-depth information. Thanks for this nice article
    국내경마

    magosucowep

    ReplyDelete
  22. 토토사이트순위December 28, 2021 at 12:59 AM

    I accidentally searched and visited your site. I still saw several posts during my visit, but the text was neat and readable. I will quote this post and post it on my blog. Would you like to visit my blog later? 토토사이트순위

    ReplyDelete
  23. Of course, your article is good enough, 슬롯사이트 but I thought it would be much better to see professional photos and videos together. There are articles and photos on these topics on my homepage, so please visit and share your opinions.

    ReplyDelete
  24. Hello ! I am the one who writes posts on these topics카지노사이트 I would like to write an article based on your article. When can I ask for a review?

    ReplyDelete
  25. I think a lot of articles related to are disappearing someday. That's why it's very hard to find, but I'm very fortunate to read your writing. When you come to my site, I have collected articles related to 크레이지슬롯.

    ReplyDelete
  26. Hello. I'm subscribed to your posts. You inspire me a lot. 바카라사이트 I am so grateful.

    ReplyDelete
  27. That is really attention-grabbing, You are a very skilled blogger. I’ve joined your rss feed and look forward to searching for more of your fantastic post. Also, I have shared your website in my social networks

    야설
    오피헌터
    외국인출장
    마사지
    카지노

    ReplyDelete
  28. https://gameeffect.xyz Lots of people have adored the video game of baseball for several years. There are fans around the globe, from committed very little-leaguers to die-difficult spectators. This information has ideas to demonstrate how pleasant baseball actually is.

    ReplyDelete
  29. https://gamebegin.xyz You are able to practice by yourself. A pitching device allows you to established the rate of your tennis ball. By reloading many baseballs in to the equipment, you may training hitting without the need for a pitcher. This electronic digital device is perfect for these who wish to exercise baseball by yourself. Pitching equipment may be found in your nearby showing off goods retail store.

    ReplyDelete
  30. ビット コイン 賭け Obtaining a work out spouse can substantially increase your muscle mass-developing results. Your lover can be quite a useful source of enthusiasm for staying on your workout program, and forcing you to definitely optimize your efforts when you workout. Having a reputable lover to sort out with can also help make you stay secure simply because you will usually have got a spotter.

    ReplyDelete
  31. That's a great article! The neatly organized content is good to see. Can I quote a blog and write it on my blog? My blog has a variety of communities including these articles. Would you like to visit me later? 토토사이트추천

    ReplyDelete
  32. I am someone who works on the web. Sometimes I like to visit overseas sites 메이저안전놀이터 when I have time. Among them, I like the site related to , but your site seems to be optimized for too!! Very good

    ReplyDelete
  33. This is the perfect post.메이저토토사이트 It helped me a lot. If you have time, I hope you come to my site and share your opinions. Have a nice day.

    ReplyDelete
  34. I had a lot of fun at this Olympics, but something was missing. I hope there's an audience next time.안전토토사이트

    ReplyDelete
  35. This site was… how do you say it? Relevant!! Finally I’ve found something which helped me. Cheers! 토토사이트

    ReplyDelete
  36. Very neat post. Really looking forward to read more. Keep writing. 파워볼사이트

    ReplyDelete
  37. Hi to every one, it’s really a pleasant for me to pay a visit this site, it consists of useful Information. Appreciate you sharing! 바카라사이트

    ReplyDelete
  38. Hi there, I simply hopped over in your website by way of StumbleUpon. Now not one thing I’d typically learn, but I favored your emotions none the less. Thank you for making something worth reading. 메이저사이트순위

    ReplyDelete
  39. Really Good Work Done By You...However, stopping by with great quality writing, it's hard to see any good blog today.
    PROcrackerr
    Helium Music Manager CRACK

    ReplyDelete
  40. Really Good Work Done By You...However, stopping by with great quality writing, it's hard to see any good blog today.
    KaliCrack
    Advanced SystemCare Pro CRACK

    ReplyDelete
  41. Your post is very helpful and information is reliable. I am satisfied with your post. Thank you so much for sharing this wonderful post. If you have any assignment requirement then you are at the right place. 메이저사이트

    ReplyDelete
  42. We are looking for a lot of data on this item. In the meantime, this is the perfect article I was looking for . Please post a lot about items related to 바카라사이트 !!! I am waiting for your article. And when you are having difficulty writing articles, I think you can get a lot of help by visiting my .

    ReplyDelete
  43. This is the perfect post.안전놀이터 It helped me a lot. If you have time, I hope you come to my site and share your opinions. Have a nice day.

    ReplyDelete
  44. Howdy! Do you know if they make any plugins to assist with SEO? I’m trying to get my blog to rank for some targeted keywords but I’m not seeing very good results. If you know of any please share. Cheers! 안전토토사이트

    ReplyDelete
  45. Hello! Nice to meet you, I say . The name of the community I run is 안전놀이터추천, and the community I run contains articles similar to your blog. If you have time, I would be very grateful if you visit my site .

    ReplyDelete