tl;dr

In this post, we are going to share our research into PKES systems and the possibility of Relay attacks on such systems.

tl;dr

• Decrypt the bitlocker encrypted drive
• extracting the flag from deleted PDF

tl;dr

• Abusing a stack overflow on a RISC-V binary to then return to shellcode.

tl;dr

• Buffer overflow in AArch64
• Bypass pointer authentication to leak libc and get shell

tl;dr

• Overflow from stdin stucture till main_arena.
• Create fake fastbin chunks to get overlapping chunk and leak.
• Overwrite __malloc_hook using fastbin attack.

tl;dr

• overflow the char candle counter stored in the wax structure and trigger uaf.
• Use the uaf to trigger double free and get shell.

tl;dr

• Finding Picture-In-Picture application capability.
• Most recently viewed web activity in Picture-In-Picture application on the device.

tl;dr

• Finding the last modified timestamp of the file that maps names to IP’s accessed.

tl;dr

• Leak with Format String bug.
• Use the arbitrary heap pointer write to overwrite __GI__IO_file_jumps.
• Inject shellode in heap and get code execution in dfprintf.