
Jump-over-ASLR-BTB
jump over aslr attacking branch predictors to bypass aslr Technique
binary-exploitationeducationexploitation+2
4

jump over aslr attacking branch predictors to bypass aslr Technique

This is a suite of tools/PoCs/exploits for cameras using the iCSee application. And yes - it can run NES games!

ASLR bypass without infoleak

Revisited CVE-2016-9795 privilege escalation (casrvc binary from CA Common Services suite)

Tool Suite for V0LTpwn (CVE-2019-11157). Code will be published soon.