Коллекция ссылок, связанных с безопасностью и эксплуатацией ядра Linux
Коллекция ссылок, связанных с безопасностью и эксплуатацией ядра Linux.
Обновляется раз в два месяца. Pull requests также приветствуются.
Подписывайтесь на @andreyknvl в X, @[email protected] в Mastodon или @andreyknvl в Bluesky, чтобы получать уведомления об обновлениях.
Подпишитесь на @linkersec в Telegram, X, Mastodon, Bluesky или Reddit, чтобы не пропустить самое интересное.
См. xairy.io/trainings/.
2022: "Gray Hat Hacking: The Ethical Hacker's Handbook, Sixth Edition" [книга] [материалы]
2014: "Android Hacker's Handbook" by Joshua J. Drake [книга]
2012: "A Guide to Kernel Exploitation: Attacking the Core" by Enrico Perla and Massimiliano Oldani [книга] [материалы]
2026: "socket(0,2,0) - Reviving modprobe_path again" by leo_something and BitFriends [статья]
2026: "Kernel-Exploit-Dojo" [код]
2026: "Kernel-Hack-Drill Masterclass" by Alexander Popov [видео]
2026: "PhantomMap: GPU-Assisted Kernel Exploitation" by Jiayi Hu et al. [статья] [слайды] [видео]
2026: "Some notes on the security properties of the pipe_buffer kernel object" by Alexander Popov [статья]
2026: "Cross-Cache Attacks for the Linux Kernel via PCP Massaging" by Claudio Migliorelli et al. [статья]
2026: "Improving Linux Heap Exploit Reliability with FreshSlices and CPU-Bullying" [статья]
2026: "DIRTYFREE: Simplified Data-Oriented Programming in the Linux Kernel" [статья]
2026: "Table Manners: Diving into Linux pagetables exp techniques" by Lau [слайды]
2025: "CROSS-X: Generalized and Stable Cross-Cache Attack on the Linux Kernel" by Dong-ok Kim et al. [статья]
2025: "Extending Kernel Race Windows Using '/dev/shm'" by Faith [статья]
2025: "Linux Kernel Exploitation for Beginners" by Kevin Massey [слайды] [видео]
2025: "KernelGP: Racing Against the Android Kernel" by Chariton Karamitas [видео]
2025: "Control Flow Hijacking in the Linux Kernel" by Valeriy Yashnikov [слайды] [видео]
2025: "Kernel Exploitation Techniques: Turning The (Page) Tables" by Samuel Page [статья]
2025: "Linux Kernel Exploitation series" by r1ru [статьи] [код]
2025: "Reviving the modprobe_path Technique: Overcoming search_binary_handler() Patch" [статья]
2025: "WHEN GOOD KERNEL DEFENSES GO BAD: Reliable and Stable Kernel Exploits via Defense-Amplified TLB Side-Channel Leaks" by Lukas Maar et al. [статья] [артефакты] [github]
2025: "Cross Cache Attack CheetSheet" by Pumpkin Chang [статья]
2024: "Cross Cache for Lazy People -- The Padding Spray Method" [статья]
2024: "Linux Kernel Use Pipe Object to Do Data-Only Attack" by Pumpkin Chang [статья]
2024: "CTF-style Tricks of Linux Kernel Exploitation" by Pumpkin Chang [статья] [часть 2]
2024: "Linux Kernel exploitation cheatsheet" by Pumpkin Chang [статья]
2024: "SLUB Internals for Exploit Developers" by Andrey Konovalov [слайды] [видео]
