skip to content

Binary Exploitation 101 - ret2dlresolve

This blog series is still a work in progress. The content may change without notice. :::

Binary Exploitation 101 - FSA and GOT Overwrite

This blog series is still a work in progress. The content may change without notice. :::

Binary Exploitation 101 - ASLR

This blog series is still a work in progress. The content may change without notice. :::

Binary Exploitation 101 - SSP

This blog series is still a work in progress. The content may change without notice. :::

Binary Exploitation 101 - Shellcode

This blog series is still a work in progress. The content may change without notice. :::

Binary Exploitation 101 - ROP

This blog series is still a work in progress. The content may change without notice. :::

Binary Exploitation 101 - Buffer Overflow

This blog series is still a work in progress. The content may change without notice. :::

Binary Exploitation 101 - Hello World

This blog series is still a work in progress. The content may change without notice. :::

Binary Exploitation 101 - Setup

This blog series is still a work in progress. The content may change without notice. :::

Binary Exploitation 101 - Introduction

This blog series is still a work in progress. The content may change without notice. :::

TsukuCTF 2025 Writeups

At TsukuCTF 2025, I created three kernel pwn challenges. It was my first time creating CTF challenges, but I learned a lot through the process. While...

Linux Kernel Exploitation - PageJack

In this post, I will explain PageJack, a universal and data-only exploitation technique that turns an off-by-one bug into a page UAF. Download the handouts...

Linux Kernel Exploitation - USMA

In this post, I will explain USMA, a universal and data-only exploitation technique that allows us to patch kernel code from user space. Download the...

Linux Kernel Exploitation - Dirty Pipe

In this post, I will explain Dirty Pipe, a universal and data-only exploitation technique that allows us to arbitrarily overwrite read-only files. Download...

Linux Kernel Exploitation - DirtyCred

In this post, I will explain DirtyCred, a universal and data-only exploitation technique that allows us to escalate privileges without a write primitive....

Linux Kernel Exploitation - Dirty PageTable

In this post, I will explain Dirty PageTable, a universal and data-only exploitation technique that allows us to gain arbitrary read and write access to the...

Linux Kernel Exploitation - Cross-Cache Attack

In this post, I will explain cross-cache attack, a fundamental technique for advanced Linux kernel exploitation. Understanding this technique is important...

Linux Kernel Exploitation - Setup

In this post, I will explain how to build and debug the Linux kernel. :::note