modern kernel exploitation

linux kernel pwn, five stages, four CTF challenges

original work: Cherie-Anne Lee (@kaligula_armblessed) · GCC 2025, Taiwan

31 lessons · 31 locked

A course book rebuilt from the 296-slide "Modern Kernel Exploitation" deck. Every attack is walked through the same five stages: find the bug, leak kernel text, leak the kernel heap, take RIP, get root. Race conditions, SLUB cross-cache, unlinking, DirtyPipe and the User Space Mapping Attack, each on a real CTF challenge, with the code screenshots transcribed back into C you can compile.

tip: press / to focus · click a part to filter

no lesson matches this filter

Every lesson here is encrypted. The passphrase is the same for all of them.

All original research, slides and artwork are theirs. This course is only a rewrite of that material into a study path: the talk's structure kept, the code screenshots transcribed, and exercises added. Every target is a deliberately vulnerable CTF challenge in a local VM.