f507def800
Added Level 11.0 ~ 11.1 of KernelSecurity in PwnCollege
2024-10-03 14:08:03 +08:00
141e4a8030
Added Level 9.0 ~ 10.1 of KernelSecurity in PwnCollege
2024-09-30 12:39:02 +08:00
d615165639
Added Level 3.0 ~ 8.1 of KernelSecurity in PwnCollege
2024-09-27 16:15:54 +08:00
41c959a465
Moved JavaScript/PwnCollegeV8Exploitation/ to PwnCollege/V8Exploitation/
2024-09-27 10:32:08 +08:00
ed5918f284
Added no KPTI-bypass exploit for KROP_LPE
2024-09-21 15:55:25 +08:00
befe99ac87
Added exploit for KROP_LPE
2024-09-19 20:30:20 +08:00
791b1e0c44
Level 9 of PwnCollegeV8Exploitation
2024-09-17 16:27:52 +08:00
e585401435
Modifed README.md for Level 8 of PwnCollegeV8Exploitation
2024-09-17 10:47:23 +08:00
cce85999cb
Level 8 of PwnCollegeV8Exploitation
2024-09-17 10:31:33 +08:00
ef1d3be1ca
Level 7 of PwnCollegeV8Exploitation
2024-09-16 19:18:58 +08:00
05e60b9cef
Modified README.md for Level 6 of PwnCollegeV8Exploitation
2024-09-16 18:58:33 +08:00
b871bb78c7
Added REVISION, args.gn and patch for existing PwnCollegeV8Exploitation Levels
2024-09-16 17:05:38 +08:00
72f089aba9
Level 6 of PwnCollegeV8Exploitation
2024-09-16 09:16:29 +08:00
90245c7091
Minor Changes to Level 3 & 4 of PwnCollegeV8Exploitation
...
1. The threshold to trigger MAGLEV compilation is different when gdb is attached to d8 or not.
- When gdb attached to d8, the training loop count to trigger MAGLEV is 100,000.
- But when the standalone d8 running, the training loop count to trigger MAGLEV is only 10,000. If you still use 100,000, it will trigger TURBOFAN then code data structure will change and shellcode execution fails.
2. Fixed other miscellaneous minor mistakes.
2024-09-15 08:57:29 +08:00
cf1552b522
Level 5 of PwnCollegeV8Exploitation
2024-09-14 21:20:16 +08:00
870420ef83
Level 4 of PwnCollegeV8Exploitation
2024-09-11 14:25:17 +08:00
a7324fc9d3
Level 3 of PwnCollegeV8Exploitation
2024-09-08 13:03:33 +08:00
baa506d4de
Level 2 of PwnCollegeV8Exploitation
2024-09-07 13:41:22 +08:00
4565c32498
Renamed JavaScript/PwnCollegeV8Exploitation/ShellCode/catflag.py -> JavaScript/PwnCollegeV8Exploitation/ShellCode/Level1_catflag.py
2024-09-07 12:09:11 +08:00
409a2d60cd
Level 1 of PwnCollegeV8Exploitation
2024-09-07 10:12:57 +08:00
d368897714
Initial Commit for PwnCollegeV8Exploitation
2024-09-07 09:21:25 +08:00
bjrjk
46f0e9626e
KROP_LPE
2024-03-28 20:51:12 +08:00
bjrjk
701f75c100
Prepare for Software Security Class Groupwork
2022-10-04 10:32:47 +08:00
bjrjk
d792c35726
Update OtherBin/playthenew
2022-10-04 10:08:54 +08:00
030d12f6bb
ROP/very_old_school published in CISCN2022-NC-Regional
2022-06-25 22:12:16 +08:00
bca57f1c6b
Removed .so in .gitignore
2022-05-11 18:09:51 +08:00
39718ef2c1
Added 5 problems and solutions
2022-05-11 18:07:40 +08:00
272640d3c6
Update OtherBin/playthenew and README
2022-04-04 14:38:35 +08:00
bjrjk
60da235775
Added IDB for UAF/ShellBank
2022-04-04 13:30:17 +08:00
bjrjk
a922995ff3
Finished UAF/ShellBank
2022-04-04 13:29:45 +08:00
5fe71da5c6
Finished OtherBin/playthenew
2022-04-03 15:55:31 +08:00
bjrjk
f7073f5e7a
Update README.md
2022-03-20 13:42:46 +08:00
bjrjk
469afcd508
Finished TCache/tcache231
2022-03-20 13:16:09 +08:00
69b9ac9231
Finished IO_FILE/io_leak
2022-03-12 22:11:43 +08:00
07817c40c5
Modified README.md
2022-03-06 20:46:50 +08:00
3df738d5bc
Correction on Comment of TCache/tcache
2022-03-06 20:44:59 +08:00
84e9ec0136
Correction on description of TCache/tcache
2022-03-06 20:00:21 +08:00
eae66b03d6
Added TCache/tcache
2022-03-04 19:02:30 +08:00
bjrjk
3bf3e05d73
Finished OtherBin/bookwriter
2022-02-25 22:37:15 +08:00
bjrjk
ca78323796
Update README
2022-02-17 15:48:47 +08:00
bjrjk
6f47f1afc2
Update OtherBin/unsorted_bin
2022-02-17 15:47:26 +08:00
bjrjk
f25ec1b572
Update OtherBin/unsorted_bin
2022-02-16 14:09:21 +08:00
bjrjk
467ce42779
Finished OtherBin/unsorted_bin
2022-02-16 13:59:22 +08:00
bjrjk
35796be4f9
Added IDA Database for FastBin/fastbin
2022-02-10 19:36:25 +08:00
bjrjk
e7e340ef47
Finished OtherBin/offbyone
2022-02-10 12:55:51 +08:00
bjrjk
aa0a5e8fc8
Added Unlink/offbyone_unlink/offbyone_unlink.i64, Added heap & unlink Tutorial
2022-02-04 14:19:35 +08:00
bjrjk
bc86cde959
Finished Unlink/offbyone_unlink
2022-02-04 14:06:05 +08:00
bjrjk
95d5ef6cc7
Almost Finished FastBin/fastbin (Little flaw)
2022-01-29 23:53:14 +08:00
bjrjk
33465c85e0
Added FastBin/fastbin
2022-01-29 14:39:11 +08:00
c585349719
Add IDA DB for VSyscall/vul64
2022-01-28 12:34:07 +08:00
Jack Ren
bjrjk