skip to content
nosiaht
home | blog | learn | talks | papers | contact
~/learn/pwn/modern-kernel-exploit/09-rip-control locked

<-- modern kernel exploitation

Chapter 9 - Step 4: double free to RIP control

lesson 12 of 31 · locked

Part II - Exploiting race conditions

this lesson is locked

Enter the passphrase to read this lesson. Nothing readable is stored in the page, so the passphrase is the only way to open it.

$ open archive

decrypting lesson

← previousChapter 8 - Step 3: kernel heap leak with msg_msgnext →Chapter 10 - Step 5: let it ROP

original work: Cherie-Anne Lee (@kaligula_armblessed) · GCC 2025, Taiwan

<-- back to contents

<-- home © 2026 sondt / Thai Son Dinh
NORMAL ~/learn/pwn/modern-kernel-exploit/09-rip-control jk scroll · du half page · gG top/end · q back