Linux कर्नेल शोषण

Linux कर्नेल सुरक्षा और शोषण से संबंधित लिंक का संग्रह।

द्वैमासिक रूप से अद्यतन। पुल अनुरोधों का भी स्वागत है।

अद्यतनों की सूचना के लिए X पर @andreyknvl, Mastodon पर @[email protected], या Bluesky पर @andreyknvl को फॉलो करें।

हाइलाइट्स के लिए Telegram, X, Mastodon, Bluesky, या Reddit पर @linkersec की सदस्यता लें।

प्रशिक्षण

xairy.io/trainings/ देखें।

विषय-सूची

• पुस्तकें
• तकनीकें
  • शोषण
  • सुरक्षा बायपास
• भेद्यताएँ
  • सूचना-रिसाव
  • LPE
  • RCE
  • KVM
  • अन्य
• बग खोजना
• रक्षात्मक
• एक्सप्लॉइट
• उपकरण
  • फ़ज़र
  • विविध
• अभ्यास
  • कार्यशालाएँ
  • CTF कार्य
  • अन्य कार्य
  • खेल के मैदान
  • अधोसंरचना
• विविध

पुस्तकें

2022: "Gray Hat Hacking: The Ethical Hacker's Handbook, Sixth Edition" [पुस्तक] [सामग्री]

2014: "Android Hacker's Handbook" by Joshua J. Drake [पुस्तक]

2012: "A Guide to Kernel Exploitation: Attacking the Core" by Enrico Perla and Massimiliano Oldani [पुस्तक] [सामग्री]

तकनीकें

शोषण

2026: "Fence2Pwn: KFENCE-Enabled Kernel Exploitation Bypassing Slab Hardening and Memory Tagging" by Ernesto Martinez Garcia et al. [पेपर]

2026: "Discovering, characterizing and exploiting controllable-copy objects for kernel data-only attacks with CopyKat" by Jakob Koschel et al. [पेपर]

2026: "socket(0,2,0) - Reviving modprobe_path again" by leo_something and BitFriends [लेख]

2026: "Kernel-Exploit-Dojo" [कोड]

2026: "Kernel-Hack-Drill Masterclass" by Alexander Popov [वीडियो]

2026: "PhantomMap: GPU-Assisted Kernel Exploitation" by Jiayi Hu et al. [पेपर] [स्लाइड्स] [वीडियो]

2026: "Some notes on the security properties of the pipe_buffer kernel object" by Alexander Popov [लेख]

2026: "Cross-Cache Attacks for the Linux Kernel via PCP Massaging" by Claudio Migliorelli et al. [पेपर]

2026: "Heap Localization: Cache Side-Channel based Linux Kernel Heap Exploit Techniques" by Yoochan Lee et al. [पेपर]

2026: "Improving Linux Heap Exploit Reliability with FreshSlices and CPU-Bullying" [लेख]

2026: "DIRTYFREE: Simplified Data-Oriented Programming in the Linux Kernel" [पेपर]

2026: "Table Manners: Diving into Linux pagetables exp techniques" by Lau [स्लाइड्स]

2025: "CROSS-X: Generalized and Stable Cross-Cache Attack on the Linux Kernel" by Dong-ok Kim et al. [पेपर]

2025: "BRIDGEROUTER: Automated Capability Upgrading of Out-Of-Bounds Write Vulnerabilities to Arbitrary Memory Write Primitives in the Linux Kernel" [पेपर]

2025: "Extending Kernel Race Windows Using '/dev/shm'" by Faith [लेख]

2025: "System Register Hijacking: Compromising Kernel Integrity By Turning System Registers Against the System" [पेपर]

2025: "Linux Kernel Exploitation for Beginners" by Kevin Massey [स्लाइड्स] [वीडियो]

2025: "KernelGP: Racing Against the Android Kernel" by Chariton Karamitas [वीडियो]

2025: "Control Flow Hijacking in the Linux Kernel" by Valeriy Yashnikov [स्लाइड्स] [वीडियो]

2025: "Kernel Exploitation Techniques: Turning The (Page) Tables" by Samuel Page [लेख]

2025: "Linux Kernel Exploitation series" by r1ru [लेख] [कोड]

2025: "Reviving the modprobe_path Technique: Overcoming search_binary_handler() Patch" [लेख]

2025: "WHEN GOOD KERNEL DEFENSES GO BAD: Reliable and Stable Kernel Exploits via Defense-Amplified TLB Side-Channel Leaks" by Lukas Maar et al. [पेपर] [आर्टिफैक्ट्स] [github]

2025: "Cross Cache Attack CheetSheet" by Pumpkin Chang [लेख]

2024: "Cross Cache for Lazy People -- The Padding Spray Method" [लेख]

2024: "Linux Kernel Use Pipe Object to Do Data-Only Attack" by Pumpkin Chang [लेख]

2024: "CTF-style Tricks of Linux Kernel Exploitation" by Pumpkin Chang [लेख] [भाग 2]

2024: "Linux Kernel exploitation cheatsheet" by Pumpkin Chang [लेख]

2024: "SLUB Internals for Exploit Developers" by Andrey Konovalov [स्लाइड्स] [वीडियो]

2024: "SCAVY: Automated Discovery of Memory Corruption Targets in Linux Kernel for Privilege Escalation" [पेपर]