Tim Blazytko’s Post

To mitigate against risks of PrivEsc, it's crucial to keep systems, software and firmware updated. As my own walkthrough can attest, it doesn't always need sophisticated methods to escalate through a vulnerable system!

Firebeam CVE-2024-26229 Plugin: A small firebeam (kaine's risc-v vm) plugin to exploit the CVE-2024-26229 vulnerability that utilizes a vulnerable IOCTL in csc.sys. The vulnerability is used to get kernel R/W memory access to corrupt the KTHREAD->PreviousMode and then to leveraging DKOM to achieve LPE by copying over the token from the system process over to the current process token.

The new RISC-V ISA is free, open source, and easy to understand, lowering the entry barriers for hardware and software development. No wonder every major tech company is interested. Check out this in-depth survey of the RISC-V processor extension landscape to understand what makes it so different and what lies ahead.

musl's dedication to memory safety pays off again with the openssh regreSSHion vulnerability (CVE-2024-6387). this time, it is because musl does not use dynamic memory allocation for formatting in printf, due to the fact that it could fail under memory pressure. this eliminates a key precondition for exploiting CVE-2024-6387, although the use of syslog(), which is not signal-safe in a signal handling context is still problematic.

The new RISC-V ISA is free, open source, and easy to understand, lowering the entry barriers for hardware and software development. No wonder every major tech company is interested. Check out this in-depth survey of the RISC-V processor extension landscape to understand what makes it so different and what lies ahead.

The new RISC-V ISA is free, open source, and easy to understand, lowering the entry barriers for hardware and software development. No wonder every major tech company is interested. Check out this in-depth survey of the RISC-V processor extension landscape to understand what makes it so different and what lies ahead: https://red.ht/3wqsXOu

The new RISC-V ISA is free, open source, and easy to understand, lowering the entry barriers for hardware and software development. No wonder, every major tech company is interested. Check out this in-depth survey of the RISC-V processor extension landscape to understand what makes it so different and what lies ahead.

Falco 0.39.1: Sysdig Falco is a behavioral activity monitoring agent that is open source and comes with native support for containers. Falco lets you define highly granular rules to check for activities involving file and network activity, process execution, IPC, and much more, using a flexible syntax. Falco will notify you when these rules are violated. You can think about Falco as a mix between snort, ossec and strace.

Swift 6 provides `Mutex` lock in the standard library in the `Synchronization` module. If the property can't be protected the data race at compile time. we can use Mutex to protect the property from data race at run time level.