🔥The 9th Round of Easy Loan, Earn $40 Reward is in progress❗️ ⏰ Promotion Period: January 15th - Feburary 15th, 2025 👉 Register now and check more details at gate.io/campaigns/358

I summarized the experience with code collaboration platforms in a short article: "Mirroring GitHub projects in 2023" a13xp0p0v.github.io/2023/01/29/mir…

My open source tool for checking the security hardening options of the Linux kernel got a new name: kernel-hardening-checker. Now it supports checking: 1⃣Kconfig options (compile-time) 2⃣Kernel cmdline arguments (boot-time) 3⃣Sysctl parameters (runtime) github.com/a13xp0p0v/kern…

My talk at #HITBxPHDays "A Bug Hunter's Reflections on Fuzzing" I describe what is special in fuzzing for vulnerability discovery and how to adapt the syzkaller kernel fuzzer for security research. Video: youtube.com/watch?v=wTbFmd… Slides: a13xp0p0v.github.io/img/Alexander_… It's fun, enjoy!

Slides for my talk at H2HC 2024: Diving into Linux kernel security 🤿 I described how to learn this complex area and knowingly configure the security parameters of your Linux-based system. And I showed my open-source tools for that purpose! a13xp0p0v.github.io/img/Alexander_…

Great work! Unfortunately, I've had a bug collision with you V4bel and qwerty ;( You've reported this vuln faster. I learned the virtual sockets as attack surface some time ago, before kernelCTF appeared: a13xp0p0v.github.io/2021/02/09/CVE…

Big update of the Linux Kernel Defence Map. I've added: ⚡️ DMA attack mitigations ⚡️ Platform reset attack mitigation ⚡️ Classification of security hardening features against heap layout control: ☑️ Heap grooming ☑️ Slab cache reuse ☑️ Cross-cache attack github.com/a13xp0p0v/linu…

[#Zer0Con2025] - SPEAKER 8️⃣ 💁‍♂️Alexander Popov - Kernel-Hack-Drill: Environment For Developing Linux Kernel Exploits

Slides of my talk at #Zer0Con2025! ⚡️ Kernel-Hack-Drill: Environment For Developing Linux Kernel Exploits ⚡️ I presented the kernel-hack-drill open-source project and showed how it helped me to exploit CVE-2024-50264 in the Linux kernel. Enjoy! a13xp0p0v.github.io/img/Alexander_…

Lifehack ⏰ I simply use the chess clock for tracking my focused worktime everyday. Here my "Work" competes against "Not Work". But the "Busy Bar" looks cool anyway 👍

Big new feature in kernel-hardening-checker: now it supports checking the Linux kernel security parameters for RISC-V ⚡️ (in addition to X86_64, ARM64, X86_32, and ARM). I've spent many weekends on this. Thanks to bcoles for the contribution ⭐️ github.com/a13xp0p0v/kern…

Guidance on how to use syzkaller to find bugs in USB drivers that can be exploited by a malicious USB device 👇

Documented instructions for setting up KGDB on Pixel 8. Including getting kernel log over UART via USB-Cereal, building/flashing custom kernel, breaking into KGDB via /proc/sysrq-trigger or by sending SysRq-G over serial, dealing with watchdogs, etc. xairy.io/articles/pixel…