Cautious: A New Exploitation Method! No Pipe but as Nasty as Dirty Pipe скачать в хорошем качестве

Cautious: A New Exploitation Method! No Pipe but as Nasty as Dirty Pipe

...In this talk, we present a novel exploitation method pushing the dirty pipe to the next level. To be specific, given a vulnerability with a double-free ability, we will demonstrate that our exploitation method could obtain the dirty-pipe-like ability to overwrite an arbitrary file to escalate privilege. Exploits utilizing our method inherit the advantage of the dirty pipe that the code would work on any version of the kernel affected without modification. We argue that our new exploitation method is not only more general than the dirty pipe but also more powerful... By: Zhenpeng Lin , Yuhang Wu , Xinyu Xing Full Abstract & Presentation Materials: https://www.blackhat.com/us-22/briefi...