252 - Bypassing KASLR and a FortiGate RCE

252 - Bypassing KASLR and a FortiGate RCE
2024-3-21 08:0:0 Author: dayzerosec.com(查看原文) 阅读量:18 收藏

20 March 2024

Show Notes

KASLR bypass in privilege-less containers

Additional Links: https://github.com/torvalds/linux/commit/b25a7c5af9051850d4f3d93ca500056ab6ec724b?diff=split&w=0#diff-14b05e05adbe24dec671f25cfc3e6d0393c889cfc84ced54d1a82acb06881b40L1533

Two Bytes is Plenty: FortiGate RCE with CVE-2024-21762

Making Mojo Exploits More Difficult

Robots Dream of Root Shells

Additional Links: https://aicyberchallenge.com/?ref=blog.isosceles.com

Gaining kernel code execution on an MTE-enabled Pixel 8

SMM isolation - Security policy reporting (ISSR)

Additional Links: https://tandasat.github.io/blog/2024/02/29/ISRD.html

文章来源: https://dayzerosec.com/podcast/252.html
如有侵权请联系:admin#unsafe.sh