Back to Playbooks
CTF
ctf-pwn-kernel-bypass
CTF kernel protection bypass techniques. KASLR bypass via stack leak, FGKASLR bypass using stable .text gadgets and __ksymtab relative offset resolution, KPTI bypass via swapgs_restore trampoline (+22 offset), SIGSEGV handler, modprobe_path ROP, core_pattern overwrite, SMEP/SMAP bypass with kernel R
Slug
ctf-pwn-kernel-bypass
Category
CTF
Run Playbook
/gitest ctf-pwn-kernel-bypass