Commit Graph

94 Commits

Author SHA1 Message Date
Jack Ren f736fa4168 Updated exploit.cpp of Level2 in KernelExploitation 2025-11-08 23:23:13 +08:00
Jack Ren 712ab90546 Updated Level2 of KernelExploitation 2025-10-28 19:03:13 +08:00
Jack Ren a5eeaba86a Updated Level1 of KernelExploitation 2025-10-16 23:24:06 +08:00
Jack Ren d5bfc6ce0a Added Level 1 of KernelExploitation in PwnCollege 2025-10-15 21:26:48 +08:00
Jack Ren 57c2848513 Updated typos in FastBin/CaNaKMgF_remastered 2024-10-25 21:16:23 +08:00
bjrjk 9e61260765 Finished FastBin/CaNaKMgF_remastered 2024-10-24 20:56:26 +08:00
Jack Ren 5537ec2174 Added Level 12.0 ~ 12.1 of KernelSecurity in PwnCollege 2024-10-03 18:54:15 +08:00
Jack Ren f507def800 Added Level 11.0 ~ 11.1 of KernelSecurity in PwnCollege 2024-10-03 14:08:03 +08:00
Jack Ren 141e4a8030 Added Level 9.0 ~ 10.1 of KernelSecurity in PwnCollege 2024-09-30 12:39:02 +08:00
Jack Ren d615165639 Added Level 3.0 ~ 8.1 of KernelSecurity in PwnCollege 2024-09-27 16:15:54 +08:00
Jack Ren 41c959a465 Moved JavaScript/PwnCollegeV8Exploitation/ to PwnCollege/V8Exploitation/ 2024-09-27 10:32:08 +08:00
Jack Ren ed5918f284 Added no KPTI-bypass exploit for KROP_LPE 2024-09-21 15:55:25 +08:00
Jack Ren befe99ac87 Added exploit for KROP_LPE 2024-09-19 20:30:20 +08:00
Jack Ren 791b1e0c44 Level 9 of PwnCollegeV8Exploitation 2024-09-17 16:27:52 +08:00
Jack Ren e585401435 Modifed README.md for Level 8 of PwnCollegeV8Exploitation 2024-09-17 10:47:23 +08:00
Jack Ren cce85999cb Level 8 of PwnCollegeV8Exploitation 2024-09-17 10:31:33 +08:00
Jack Ren ef1d3be1ca Level 7 of PwnCollegeV8Exploitation 2024-09-16 19:18:58 +08:00
Jack Ren 05e60b9cef Modified README.md for Level 6 of PwnCollegeV8Exploitation 2024-09-16 18:58:33 +08:00
Jack Ren b871bb78c7 Added REVISION, args.gn and patch for existing PwnCollegeV8Exploitation Levels 2024-09-16 17:05:38 +08:00
Jack Ren 72f089aba9 Level 6 of PwnCollegeV8Exploitation 2024-09-16 09:16:29 +08:00
Jack Ren 90245c7091 Minor Changes to Level 3 & 4 of PwnCollegeV8Exploitation
1. The threshold to trigger MAGLEV compilation is different when gdb is attached to d8 or not.
    - When gdb attached to d8, the training loop count to trigger MAGLEV is 100,000.
    - But when the standalone d8 running, the training loop count to trigger MAGLEV is only 10,000. If you still use 100,000, it will trigger TURBOFAN then code data structure will change and shellcode execution fails.
2. Fixed other miscellaneous minor mistakes.
2024-09-15 08:57:29 +08:00
Jack Ren cf1552b522 Level 5 of PwnCollegeV8Exploitation 2024-09-14 21:20:16 +08:00
Jack Ren 870420ef83 Level 4 of PwnCollegeV8Exploitation 2024-09-11 14:25:17 +08:00
Jack Ren a7324fc9d3 Level 3 of PwnCollegeV8Exploitation 2024-09-08 13:03:33 +08:00
Jack Ren baa506d4de Level 2 of PwnCollegeV8Exploitation 2024-09-07 13:41:22 +08:00
Jack Ren 4565c32498 Renamed JavaScript/PwnCollegeV8Exploitation/ShellCode/catflag.py -> JavaScript/PwnCollegeV8Exploitation/ShellCode/Level1_catflag.py 2024-09-07 12:09:11 +08:00
Jack Ren 409a2d60cd Level 1 of PwnCollegeV8Exploitation 2024-09-07 10:12:57 +08:00
Jack Ren d368897714 Initial Commit for PwnCollegeV8Exploitation 2024-09-07 09:21:25 +08:00
bjrjk 46f0e9626e KROP_LPE 2024-03-28 20:51:12 +08:00
bjrjk 701f75c100 Prepare for Software Security Class Groupwork 2022-10-04 10:32:47 +08:00
bjrjk d792c35726 Update OtherBin/playthenew 2022-10-04 10:08:54 +08:00
Jack Ren 030d12f6bb ROP/very_old_school published in CISCN2022-NC-Regional 2022-06-25 22:12:16 +08:00
Jack Ren bca57f1c6b Removed .so in .gitignore 2022-05-11 18:09:51 +08:00
Jack Ren 39718ef2c1 Added 5 problems and solutions 2022-05-11 18:07:40 +08:00
Jack Ren 272640d3c6 Update OtherBin/playthenew and README 2022-04-04 14:38:35 +08:00
bjrjk 60da235775 Added IDB for UAF/ShellBank 2022-04-04 13:30:17 +08:00
bjrjk a922995ff3 Finished UAF/ShellBank 2022-04-04 13:29:45 +08:00
Jack Ren 5fe71da5c6 Finished OtherBin/playthenew 2022-04-03 15:55:31 +08:00
bjrjk f7073f5e7a Update README.md 2022-03-20 13:42:46 +08:00
bjrjk 469afcd508 Finished TCache/tcache231 2022-03-20 13:16:09 +08:00
Jack Ren 69b9ac9231 Finished IO_FILE/io_leak 2022-03-12 22:11:43 +08:00
Jack Ren 07817c40c5 Modified README.md 2022-03-06 20:46:50 +08:00
Jack Ren 3df738d5bc Correction on Comment of TCache/tcache 2022-03-06 20:44:59 +08:00
Jack Ren 84e9ec0136 Correction on description of TCache/tcache 2022-03-06 20:00:21 +08:00
Jack Ren eae66b03d6 Added TCache/tcache 2022-03-04 19:02:30 +08:00
bjrjk 3bf3e05d73 Finished OtherBin/bookwriter 2022-02-25 22:37:15 +08:00
bjrjk ca78323796 Update README 2022-02-17 15:48:47 +08:00
bjrjk 6f47f1afc2 Update OtherBin/unsorted_bin 2022-02-17 15:47:26 +08:00
bjrjk f25ec1b572 Update OtherBin/unsorted_bin 2022-02-16 14:09:21 +08:00
bjrjk 467ce42779 Finished OtherBin/unsorted_bin 2022-02-16 13:59:22 +08:00