A journey for bug hunting in Linux binary fuzzing

Steal memory from libc to hijack symbol resolution logic for RCE

Make “Format String Vulnerability” great again

Defeat the pointer guard and hijack execution flow.

There is no excerpt because this is a protected post.

There is no excerpt because this is a protected post.

There is no excerpt because this is a protected post.

There is no excerpt because this is a protected post.

There is no excerpt because this is a protected post.

There is no excerpt because this is a protected post.

There is no excerpt because this is a protected post.

There is no excerpt because this is a protected post.

There is no excerpt because this is a protected post.

Explore depths of Protobuf pwn: descriptors, wire types, structs