skip to content
nosiaht
home | blog | learn | talks | papers | contact
~/learn/pwn/modern-kernel-exploit/08-kernel-heap-leak locked

<-- modern kernel exploitation

Chapter 8 - Step 3: kernel heap leak with msg_msg

lesson 11 of 31 · locked

Part II - Exploiting race conditions

this lesson is locked

Enter the passphrase to read this lesson. Nothing readable is stored in the page, so the passphrase is the only way to open it.

$ open archive

decrypting lesson

← previousChapter 7 - Step 2: kernel text leak with timerfd_ctxnext →Chapter 9 - Step 4: double free to RIP control

original work: Cherie-Anne Lee (@kaligula_armblessed) · GCC 2025, Taiwan

<-- back to contents

<-- home © 2026 sondt / Thai Son Dinh
NORMAL ~/learn/pwn/modern-kernel-exploit/08-kernel-heap-leak jk scroll · du half page · gG top/end · q back