star-sg/presentationsКурируемая подборка слайдов с конференций по offensive security, охватывающая эксплуатацию ядра и мобильных устройств, побеги из VM/контейнеров, а также фаззинг и исследования уязвимостей.
Pwn2OwNothing: When a KVM Full-Chain Escapes to Emptiness — PAN Zhenpeng, Billy JHENG Bing Jhong, Bruce CHEN и SHI Weiming
AI Accelerated Exploiting: Compromising MTE Enabled Pixel from DSP Coprocessor — PAN Zhenpeng и Billy JHENG Bing Jhong
Dancing with Exynos Coprocessor: Pwning Samsung for fun and “profit” — Muhammad Ramdhan, PAN Zhenpeng и Billy JHENG Bing Jhong
Cracking the Pixel 8: Exploiting the Undocumented DSP to Bypass MTE — PAN Zhenpeng и Billy JHENG Bing Jhong
VMware Workstation: Escaping via a New Route - Virtual Bluetooth — NGUYỄN Hoàng Thạch
GPUAF : Two ways of rooting All Qualcomm based Android phones — PAN Zhenpeng и Billy JHENG Bing Jhong
A Year Fuzzing XNU Mach IPC — Peter NGUYỄN Vũ Hoàng
Ghosts of the Past: Classic PHP RCE Bugs in Trend Micro Enterprise Offerings — POH Jia Hao
What You See IS NOT What You Get: Pwning Electron-based Markdown Note-taking Apps — LI Jiantao
Unearthing Vulnerabilities in the Apple Ecosystem The Art of KidFuzzerV2.0 — PAN Zhenpeng
How to Backup and Pwn using Time Machine — NGUYỄN Hoàng Thạch
The Journey To Hybrid Apple Driver Fuzzing — PAN Zhenpeng
All Roads leads to GKE’s Host : 4+ Ways to Escape от Billy JHENG Bing-Jhong и Muhammad Ramdhan
A journey of hunting macOS kernel vulnerability от Peter NGUYỄN Vũ Hoàng
An Introduction to Manual Source Code Review от POH Jia Hao
A case study of an incorrect bitwise and optimization in V8 от Lucas TAY
VM Escape Case Study VirtualBox Bug Hunting and Exploitation от Muhammad Ramdhan
The Great Escape - A Case Study of VM Escape and EoP Vulnerabilities от Billy JHENG Bing-Jhong и Muhammad Ramdhan
