#kernelexploit — Public Fediverse posts

📬 Microsoft will mit Windows 11-Update Hypervisor-Cracks aushebeln
#Denuvo #HypervisorCracks #KernelExploit #Signieren #Treiber #Update #voices38 #Windows11 https://sc.tarnkappe.info/3f2d3c

📬 Microsoft will mit Windows 11-Update Hypervisor-Cracks aushebeln
#Denuvo #HypervisorCracks #KernelExploit #Signieren #Treiber #Update #voices38 #Windows11 https://sc.tarnkappe.info/3f2d3c

📬 Microsoft will mit Windows 11-Update Hypervisor-Cracks aushebeln
#Denuvo #HypervisorCracks #KernelExploit #Signieren #Treiber #Update #voices38 #Windows11 https://sc.tarnkappe.info/3f2d3c

📬 Microsoft will mit Windows 11-Update Hypervisor-Cracks aushebeln
#Denuvo #HypervisorCracks #KernelExploit #Signieren #Treiber #Update #voices38 #Windows11 https://sc.tarnkappe.info/3f2d3c

📬 Microsoft will mit Windows 11-Update Hypervisor-Cracks aushebeln
#Denuvo #HypervisorCracks #KernelExploit #Signieren #Treiber #Update #voices38 #Windows11 https://sc.tarnkappe.info/3f2d3c

The USB Attack: A Tiny Device, A Huge Risk
This vulnerability revolves around a Physical Access Vector (PAV) involving a malicious USB device. The attacker planted a USB stick with malicious firmware into the target computer's USB port, allowing it to execute arbitrary code when connected. The device exploited a flaw in the USB Mass Storage Device (MSC) protocol, enabling it to bypass driver restrictions. The attacker crafted the firmware to mimic a removable drive, which was unrecognized by the operating system and thus evaded antivirus scanning. Upon insertion, the malicious firmware triggered a built-in exploit, taking advantage of a kernel vulnerability to gain system-level access. The impact of this vulnerability is severe, as it allows unauthorized access, data theft, and malware injection. The researcher earned $5,000 for reporting this critical issue. Proper remediation involves securing USB ports with hardware restrictions and implementing firmware-level whitelisting to prevent unauthorized devices from executing arbitrary code. Key lesson: Physical access can lead to critical security breaches, making it essential to secure USB ports. #BugBounty #Cybersecurity #PAV #PhysicalAccess #KernelExploit

https://medium.com/@bugitrix/%EF%B8%8F-the-usb-attack-a-tiny-device-a-huge-risk-3a66795f65f1?source=rss------bug_bounty-5

The USB Attack: A Tiny Device, A Huge Risk
This vulnerability revolves around a Physical Access Vector (PAV) involving a malicious USB device. The attacker planted a USB stick with malicious firmware into the target computer's USB port, allowing it to execute arbitrary code when connected. The device exploited a flaw in the USB Mass Storage Device (MSC) protocol, enabling it to bypass driver restrictions. The attacker crafted the firmware to mimic a removable drive, which was unrecognized by the operating system and thus evaded antivirus scanning. Upon insertion, the malicious firmware triggered a built-in exploit, taking advantage of a kernel vulnerability to gain system-level access. The impact of this vulnerability is severe, as it allows unauthorized access, data theft, and malware injection. The researcher earned $5,000 for reporting this critical issue. Proper remediation involves securing USB ports with hardware restrictions and implementing firmware-level whitelisting to prevent unauthorized devices from executing arbitrary code. Key lesson: Physical access can lead to critical security breaches, making it essential to secure USB ports. #BugBounty #Cybersecurity #PAV #PhysicalAccess #KernelExploit

https://medium.com/@bugitrix/%EF%B8%8F-the-usb-attack-a-tiny-device-a-huge-risk-3a66795f65f1?source=rss------bug_bounty-5

📬 Sony beseitigt mit neuer Firmware-Version für PS4 & PS5 TheFlows Kernel-Exploit
#Jailbreaks #Gezine #Jailbreak #KernelExploit #Lua #TheFlow #UserlandExploit #Y2JB https://sc.tarnkappe.info/0d559c

📬 FreeBSD als Basis eines neuen PS5-Jailbreaks?
#Gaming #Jailbreaks #CVE202443102 #DebTy #FreeBSD #KernelExploit #PS5 #Zecoxao https://sc.tarnkappe.info/34865b

PoC Exploit Released For Windows Kernel EoP Vulnerability https://gbhackers.com/windows-kernel-eop-exploit-released/ #CVE/vulnerability #CyberSecurityNews #WindowsSecurity #KernelExploit #CVE202426218 #Microsoft

Apple Vision Pro bereits gehackt: Sicherheitslücke entdeckt
Erst einen Tag nach der Markteinführung der Apple Vision Pro berichtet ein Sicherheitsforscher über eine entscheidende Entdeckung. Ein Kernel-Exploit für visionOS wurde en
https://www.apfeltalk.de/magazin/news/apple-vision-pro-bereits-gehackt-sicherheitsluecke-entdeckt/
#News #Vision #AppleUpdate #KernelExploit #AppleSecurityBounty #Sicherheitslcke #Jailbreak #Malware #Technologie #visionOS #AppleVisionPro #Sicherheitsforschung

📬 PsFree: neuer Webkit-Exploit erschienen
#Gaming #Jailbreaks #CelesteBlue #KernelExploit #PS4Jailbreak #PS5Jailbreak #PsFree #QuickHENPS4 #WebkitExploit https://tarnkappe.info/artikel/jailbreaks/psfree-neuer-webkit-exploit-erschienen-284216.html

🪲 Linux Privilege Escalation vulnerability

👉 Buffer overflow
vulnerability within the Netfilter subsystem (CVE-2023-0179)

👉 Allow the leakage of both stack & heap addresses
and,potentially, a Local Privilege Escalation to the root

Poc:
https://github.com/TurtleARM/CVE-2023-0179-PoC

Write up:
https://www.openwall.com/lists/oss-security/2023/01/13/2

#infosec #KernelExploit #Exploits #linux

📬 PS Vita: Kernel-Exploit HENlo gestaltet Jailbreak sehr einfach
#Gaming #Jailbreaks #HENlo #KernelExploit #PlaystationVita #PSVita #PSVitaFirmware #PSVitaJailbreak #PSN #TheFlow https://tarnkappe.info/artikel/jailbreaks/ps-vita-kernel-exploit-henlo-gestaltet-jailbreak-sehr-einfach-262197.html

DirtyCred Remastered: how to turn an UAF into Privilege Escalation

Articles:
https://exploiter.dev/blog/2022/CVE-2022-2602.html

https://blog.hacktivesecurity.com/index.php/2022/12/21/cve-2022-2602-dirtycred-file-exploitation-applied-on-an-io_uring-uaf/

Poc:
https://github.com/LukeGix/CVE-2022-2602

Credits: @kiks7_7 @LukeGix

#exploitdevelopment #infosec #binaryexploit
#kernelexploit #privilegeescalation #linux

Lessons on Linux kernel exploit development:

https://breaking-bits.gitbook.io/breaking-bits/exploit-development/linux-kernel-exploit-development

https://lkmidas.github.io/posts/20210123-linux-kernel-pwn-part-1/

#exploitdevelopment #infosec #exploit #exploitation
#kernelexploit #ring0 #privilegeescalation #linux

Linux Kernel ksmbd Use-After-Free Remote Code Execution Vulnerability

👉 Execute arbitrary code on affected installations

👉 Authentication not required

👉 Only systems with ksmbd enabled

https://www.zerodayinitiative.com/advisories/ZDI-22-1690/

#infosec #cve #vulnerabilities #linux #kernelexploit #binaryexploitation #exploitation

📬 PS3/PS4/PS5 Blu-ray Discs: fünf neue Bugs ermöglichen Jailbreak
#Gaming #Jailbreaks #AndyNguyen #ELFLoader #hardweario #Jailbreak #KernelExploit #PS5 #TheFlow https://tarnkappe.info/artikel/jailbreaks/ps3-ps4-ps5-blu-ray-discs-fuenf-neue-bugs-ermoeglichen-jailbreak-243155.html

📬 PS3/PS4/PS5 Blu-ray Discs: fünf neue Bugs ermöglichen Jailbreak
#Gaming #Jailbreaks #AndyNguyen #ELFLoader #hardweario #Jailbreak #KernelExploit #PS5 #TheFlow https://tarnkappe.info/artikel/jailbreaks/ps3-ps4-ps5-blu-ray-discs-fuenf-neue-bugs-ermoeglichen-jailbreak-243155.html

📬 PS3/PS4/PS5 Blu-ray Discs: fünf neue Bugs ermöglichen Jailbreak
#Gaming #Jailbreaks #AndyNguyen #ELFLoader #hardweario #Jailbreak #KernelExploit #PS5 #TheFlow https://tarnkappe.info/artikel/jailbreaks/ps3-ps4-ps5-blu-ray-discs-fuenf-neue-bugs-ermoeglichen-jailbreak-243155.html