BadIRET: a Linux kernel privilege escalation rooted in a CPU instruction quirk
An analysis of BadIRET (CVE-2014-9322), a Linux kernel flaw where a mishandled CPU exception let a local process redirect a kernel-internal pointer.
Read moreKernel and exploits
Kernel bugs, privilege escalation and the hardening work that made exploitation harder.
2015
2014
A history of PaX: the hardening project that predicted modern exploit mitigations
A retrospective on PaX, the long-running Linux hardening patch whose early-2000s ideas anticipated ASLR, NX and other mainstream mitigations.
Read more2013
Why a one-line find command is a post-compromise goldmine
A tiny shell one-liner that hunts a compromised Linux box for config and history files shows why post-exploitation enumeration is cheap and effective.
Read more2012
Mimikatz and why Windows stopped trusting lsass.exe with plaintext
Mimikatz showed that lsass.exe held reversibly encrypted credentials, not just hashes, and that discovery reshaped how Windows protects memory.
Read more