Top all-time · #11768
Pwning Tech
Personal blog · pwning.techsecuritysystems
Pwning Tech is a personal blog at pwning.tech about security and systems. Since 2023, 6 different Hacker News readers have linked it 7 times, most often “Flipping Pages: New Linux vulnerability in nf_tables and exploitation techniques”. The last post was in 2024, but the archive is still widely read.
Too few sampled comments (3) to say how often HN recommends it.?
Why HN links it
HN readers link pwning.tech for its detailed writeup of the nf_tables Linux kernel vulnerability (CVE-2024-1086) and how it was exploited. One commenter calls it required reading for that exploit.
Summarised by Claude from a sample of 3 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Explore offensive security: vulnerability research, pwn, and web exploitation, in the form of kernel zerodays, Internet-of-Things exploits, and fuzzing experiments.
Most-linked posts?
- Flipping Pages: New Linux vulnerability in nf_tables and exploitation techniques3 people · 3 mentions · first linked 2024-03-26
- Tickling ksmbd: fuzzing SMB in the Linux kernel (2023)2 people · 2 mentions · first linked 2023-09-18
What Hacker News says?
Manual auditing ;-) I have specified it in https://pwning.tech/nftables#31-finding-the-bug
Comment linking /nftables
on “Flipping Pages: New Linux vulnerability in nf_tables and exploitation techniques”Submitted Flipping Pages: New Linux vulnerability in nf_tables and exploitation techniques as a story · 406 points
HN discussionmodern mitigations have made exploits much more difficult, however researchers continue to find bypasses to these mitigations. there are "classic" techniques to bypass most of the modern protections and if there isn't then researchers often come up with novel attacks / bypasses. for example for heap protections you can see how2heap to bypass heap protections[0]. another example is an exploit which allows bypass of K…
Comment linking /nftables/
on “Flipping Pages: New Linux vulnerability in nf_tables and exploitation techniques”Submitted Tickling ksmbd: fuzzing SMB in the Linux kernel (2023) as a story · 3 points
HN discussionhttps://pwning.tech/nftables/ is the required reading for this exploit
Comment linking /nftables/
on “Nasty Linux Bug, CVE-2024-1086, is on the loose”Submitted Flipping Pages: An analysis of a new Linux vulnerability in nf_tables as a story · 2 points
HN discussionSubmitted Tickling ksmbd: fuzzing SMB in the Linux kernel as a story · 1 points
HN discussion