Jack Ren
141e4a8030
Added Level 9.0 ~ 10.1 of KernelSecurity in PwnCollege
2024-09-30 12:39:02 +08:00
Jack Ren
d615165639
Added Level 3.0 ~ 8.1 of KernelSecurity in PwnCollege
2024-09-27 16:15:54 +08:00
Jack Ren
41c959a465
Moved JavaScript/PwnCollegeV8Exploitation/ to PwnCollege/V8Exploitation/
2024-09-27 10:32:08 +08:00
Jack Ren
ed5918f284
Added no KPTI-bypass exploit for KROP_LPE
2024-09-21 15:55:25 +08:00
Jack Ren
befe99ac87
Added exploit for KROP_LPE
2024-09-19 20:30:20 +08:00
Jack Ren
791b1e0c44
Level 9 of PwnCollegeV8Exploitation
2024-09-17 16:27:52 +08:00
Jack Ren
e585401435
Modifed README.md for Level 8 of PwnCollegeV8Exploitation
2024-09-17 10:47:23 +08:00
Jack Ren
cce85999cb
Level 8 of PwnCollegeV8Exploitation
2024-09-17 10:31:33 +08:00
Jack Ren
ef1d3be1ca
Level 7 of PwnCollegeV8Exploitation
2024-09-16 19:18:58 +08:00
Jack Ren
05e60b9cef
Modified README.md for Level 6 of PwnCollegeV8Exploitation
2024-09-16 18:58:33 +08:00
Jack Ren
b871bb78c7
Added REVISION, args.gn and patch for existing PwnCollegeV8Exploitation Levels
2024-09-16 17:05:38 +08:00
Jack Ren
72f089aba9
Level 6 of PwnCollegeV8Exploitation
2024-09-16 09:16:29 +08:00
Jack Ren
90245c7091
Minor Changes to Level 3 & 4 of PwnCollegeV8Exploitation
...
1. The threshold to trigger MAGLEV compilation is different when gdb is attached to d8 or not.
- When gdb attached to d8, the training loop count to trigger MAGLEV is 100,000.
- But when the standalone d8 running, the training loop count to trigger MAGLEV is only 10,000. If you still use 100,000, it will trigger TURBOFAN then code data structure will change and shellcode execution fails.
2. Fixed other miscellaneous minor mistakes.
2024-09-15 08:57:29 +08:00
Jack Ren
cf1552b522
Level 5 of PwnCollegeV8Exploitation
2024-09-14 21:20:16 +08:00
Jack Ren
870420ef83
Level 4 of PwnCollegeV8Exploitation
2024-09-11 14:25:17 +08:00
Jack Ren
a7324fc9d3
Level 3 of PwnCollegeV8Exploitation
2024-09-08 13:03:33 +08:00
Jack Ren
baa506d4de
Level 2 of PwnCollegeV8Exploitation
2024-09-07 13:41:22 +08:00
Jack Ren
4565c32498
Renamed JavaScript/PwnCollegeV8Exploitation/ShellCode/catflag.py -> JavaScript/PwnCollegeV8Exploitation/ShellCode/Level1_catflag.py
2024-09-07 12:09:11 +08:00
Jack Ren
409a2d60cd
Level 1 of PwnCollegeV8Exploitation
2024-09-07 10:12:57 +08:00
Jack Ren
d368897714
Initial Commit for PwnCollegeV8Exploitation
2024-09-07 09:21:25 +08:00
46f0e9626e
KROP_LPE
2024-03-28 20:51:12 +08:00
701f75c100
Prepare for Software Security Class Groupwork
2022-10-04 10:32:47 +08:00
d792c35726
Update OtherBin/playthenew
2022-10-04 10:08:54 +08:00
Jack Ren
030d12f6bb
ROP/very_old_school published in CISCN2022-NC-Regional
2022-06-25 22:12:16 +08:00
Jack Ren
bca57f1c6b
Removed .so in .gitignore
2022-05-11 18:09:51 +08:00
Jack Ren
39718ef2c1
Added 5 problems and solutions
2022-05-11 18:07:40 +08:00
Jack Ren
272640d3c6
Update OtherBin/playthenew and README
2022-04-04 14:38:35 +08:00
60da235775
Added IDB for UAF/ShellBank
2022-04-04 13:30:17 +08:00
a922995ff3
Finished UAF/ShellBank
2022-04-04 13:29:45 +08:00
Jack Ren
5fe71da5c6
Finished OtherBin/playthenew
2022-04-03 15:55:31 +08:00
f7073f5e7a
Update README.md
2022-03-20 13:42:46 +08:00
469afcd508
Finished TCache/tcache231
2022-03-20 13:16:09 +08:00
Jack Ren
69b9ac9231
Finished IO_FILE/io_leak
2022-03-12 22:11:43 +08:00
Jack Ren
07817c40c5
Modified README.md
2022-03-06 20:46:50 +08:00
Jack Ren
3df738d5bc
Correction on Comment of TCache/tcache
2022-03-06 20:44:59 +08:00
Jack Ren
84e9ec0136
Correction on description of TCache/tcache
2022-03-06 20:00:21 +08:00
Jack Ren
eae66b03d6
Added TCache/tcache
2022-03-04 19:02:30 +08:00
3bf3e05d73
Finished OtherBin/bookwriter
2022-02-25 22:37:15 +08:00
ca78323796
Update README
2022-02-17 15:48:47 +08:00
6f47f1afc2
Update OtherBin/unsorted_bin
2022-02-17 15:47:26 +08:00
f25ec1b572
Update OtherBin/unsorted_bin
2022-02-16 14:09:21 +08:00
467ce42779
Finished OtherBin/unsorted_bin
2022-02-16 13:59:22 +08:00
35796be4f9
Added IDA Database for FastBin/fastbin
2022-02-10 19:36:25 +08:00
e7e340ef47
Finished OtherBin/offbyone
2022-02-10 12:55:51 +08:00
aa0a5e8fc8
Added Unlink/offbyone_unlink/offbyone_unlink.i64, Added heap & unlink Tutorial
2022-02-04 14:19:35 +08:00
bc86cde959
Finished Unlink/offbyone_unlink
2022-02-04 14:06:05 +08:00
95d5ef6cc7
Almost Finished FastBin/fastbin (Little flaw)
2022-01-29 23:53:14 +08:00
33465c85e0
Added FastBin/fastbin
2022-01-29 14:39:11 +08:00
Jack Ren
c585349719
Add IDA DB for VSyscall/vul64
2022-01-28 12:34:07 +08:00
Jack Ren
f559294426
Update README
2022-01-28 12:28:06 +08:00
