@azz_maher

Security Researcher. Linux security. Student at @1337FIL CTFs with @Water_Paddler

github.com/MaherAzzouzi
Joined January 2020
  • Tweets1K
  • Following0
  • Followers1.1K
38Media
Maher retweeted
raptor@0xdea11 Aug 2022
Excellent primer for VMware offensive security research by @iamnion and @esizkur ✊ comsecuris.com/blog/posts/vm…
36
85
I will disclose three Local Privilege Escalations (two of those are targeting a specific user, the third one is LPE from any user to root which is considered a critical vuln) and one Information Disclosure bug (Non-root user can know if a directory exist or no anywhere in the fs)
6
3
1
37
Will disclose those when they all get patched.
2
Fuzzable Framework for Automating Fuzzable Target Discovery with Static Analysis github.com/ex0dus-0x/fuzzabl… t.me/HackGit/5383
36
1
93
I've released a beta version of #pawnyable, a website to learn advanced binary exploitation🐺🐱🐰🐼 Currently only the Linux Kernel chapter is about 90% complete😖 Other chapters and multilingual support are TODO😇 pawnyable.cafe/

PAWNYABLE!

もふもふpwnワールド

pawnyable.cafe
18
243
6
730
"Using unwrap() in Rust is Okay" First blog post in over two years. Finally. blog.burntsushi.net/unwrap/
11
55
9
398
New blog post on our recent discovered vulnerability: Linux kernel io_uring module privilege escalation exploit dawnslab.jd.com/linux-5.19-r…

linux内核io_uring模块pbuf_ring漏洞与提权0day

本实验室使用syzkaller对linux-5.19-rc2版本的io_uring模块进行fuzz时, 在io_register_pbuf_ring()函数中发现了了一枚由于错误的异常处理导致的UAF漏洞, 通过slab跳跃与kernel unlink attack等技巧, 本文较为简单的堆环境下成功实现了提权. 但是目前该漏洞已经在5.19-rc8中被修复, 因此决定将该0day漏洞发现的过程与

dawnslab.jd.com
57
4
221
b34e97b5c6714fe4e40441caecde7c40
7
How much time CVE mitre take to review a vulnerability?
1
3
LMAO the easiest way to pop calc on your phone is to get in to DEFCON with your bluetooth enabled 😂😂
Cannibal 🎃@Cannibal2 Aug 2022
2 days into @defcon and realizing you didn't turn off bluetooth
1
2
3
Linux 5.19 is out, and Linus Torvalds released it from an M2 MacBook Air running the Asahi Linux kernel! 🎉 lore.kernel.org/lkml/CAHk-=w…
44
904
127
5,115
Stickers are ready for #DEFCON30 – at Bengaluru South, India
2
4
42
I'm looking forward to reading the new Linux kernel debugging book soon amazon.co.uk/gp/product/1801…

Linux Kernel Debugging: Leverage proven tools and advanced techniques to effectively debug Linux...

Linux Kernel Debugging: Leverage proven tools and advanced techniques to effectively debug Linux kernels and kernel modules

amazon.co.uk
8
37
CVE-2022-36123 - Linux v5.19-rc6 and below out-of-bounds read to asm page fault (or arbitrary code exec if a host has used kexec to load another kernel). Xen hypervisor stuff sick.codes/sick-2022-128/

CVE-2022-36123 - A vulnerability in Linux kernel mainline v5.18-rc1 through v5.19-rc6 does not...

Title A vulnerability in Linux kernel mainline v5.18-rc1 through v5.19-rc6 does not clear statically allocated variables in the block starting symbol (.bss) due to a failed early_xen_iret_patch...

sick.codes
34
1
98
One of the reasons I stopped using Firefox is because of that folder it creates in ~/Downloads. Pretty annoying for me.
1
3
First part of how we exploited the NetUSB kernel module on TP-Link Archer C7 AC1750 and Netgear R6700 routers. This part focuses on setting up an environment to load and debug the module using Buildroot and QEMU. blog.security.sea.com/posts/…
1
45
124
If gamozo is involved I'm interested
Brandon Falk@gamozolabs27 Jul 2022
Hallå Sverige!
3
This is cute! Inside the Linux Kernel.
8
152
6
638
I just do not audit utils.c and assume that it contain micro functions that are already secure. I'm 100% wrong.
This Post is from an account that no longer exists. Learn more
1
1
4
Load more