MENU

Resources(82)

  • FreeBSD kernel debugging

    Patroklos Argyroudis

    The FreeBSD kernel can be debugged with the ddb(4) interactive kernel debugger. Although the latest production release of FreeBSD (7.1 at the time of this writing) adds some very useful features, ddb is still lacking the flexibility of gdb.

  • Black Hat Europe 2011 update

    Patroklos Argyroudis

    Black Hat Europe 2011 is now over and we are very happy to have participated once again in the best European IT security conference!

  • FreeBSD kernel NFS client local vulnerabilities

    Patroklos Argyroudis

    .3‑RELEASE, and 8.0Short description:** Two improper input‑validation flaws in the FreeBSD NFS client (versions 7.2‑RELEASE, 7.3‑RELEASE, and 8.0‑RELEASE) allow local unprivileged users to trigger kernel stack and kernel heap overflows through crafted arguments to the mount(2) and nmount(2) system calls when...

  • FreeBSD kernel exploitation mitigations

    Patroklos Argyroudis

    In my recent Black Hat Europe 2010 talk I gave an overview of the kernel exploitation prevention mechanisms that exist on FreeBSD. A few people at the conference have subsequently asked me to elaborate on the subject. In this post I will collect all the information from my talk and the various discussions I had in the...

  • Black Hat Europe 2010 update

    Patroklos Argyroudis

    Black Hat Europe 2010 is now over and after a brief ash cloud caused delay I am back in Greece. It has been a great conference, flawlessly organised and with many outstanding presentations. I would like to thank everyone that attended my presentation but also all the kind people that spoke to me before and afterwards....

  • CVE-2008-3531: FreeBSD kernel stack overflow exploit development

    Patroklos Argyroudis

    About four months ago I developed a reliable exploit for vulnerability CVE-2008-3531, which is also addressed in the advisory FreeBSD-SA-08:08.nmount. In this post I will use this vulnerability to provide an overview of the development process for FreeBSD kernel stack exploits.

  • FreeBSD kernel stack overflows

    Patroklos Argyroudis

    Last May (2008-05-30) I presented my research on FreeBSD kernel stack overflows at the University of Piraeus Software Libre Society, Event #16: Computer Security. The slides from the talk are now available in our research section.