2024-12-03 00:03:14 +08:00
|
|
|
|
[
|
2024-12-09 23:52:49 +08:00
|
|
|
|
{
|
|
|
|
|
|
"guid": "https://forum.butian.net/share/3936",
|
|
|
|
|
|
"title": "解读 2024 年高通 GPU 漏洞细节及利用技术",
|
|
|
|
|
|
"description": "本文主要分析 2024 年高通 GPU 上的一些漏洞细节\nCVE-2024-23380\n与 Mali 类似高通的 GPU 驱动使用 kgsl_mem_entry 和 kgsl_memdesc 结构体来管理物理页\n\nkgsl_mem_entry 对象分配的逻辑位于 kg...",
|
|
|
|
|
|
"source": "subject",
|
|
|
|
|
|
"pubDate": "2024-12-09 10:00:02"
|
|
|
|
|
|
},
|
|
|
|
|
|
{
|
|
|
|
|
|
"guid": "https://forum.butian.net/share/3919",
|
|
|
|
|
|
"title": "glibc堆all-in-one",
|
|
|
|
|
|
"description": "本篇文章篇幅很长，记录了笔者学习glibc堆的全部心得，从入门的堆分配的学习，一些经典打法的总结，以及个人的技巧，保护机制的变动。再到io basic knowledge，glibc的IO-FILE攻击部分，常见的house系列总结，最后到magic_gadgets，以及打libc got,stdout,stderr这些比较边角的内容，希望对入门学堆的你有所帮助，也希望帮助更多学习glibc堆的师傅建立知识体系，也欢迎更多大佬进行补充指点",
|
|
|
|
|
|
"source": "subject",
|
|
|
|
|
|
"pubDate": "2024-12-09 09:00:00"
|
|
|
|
|
|
},
|
2024-12-08 00:18:31 +08:00
|
|
|
|
{
|
|
|
|
|
|
"guid": "https://forum.butian.net/share/3924",
|
|
|
|
|
|
"title": "GPU 驱动漏洞：窥探驱动漏洞利用的技术奥秘",
|
|
|
|
|
|
"description": "本文尝试以 GPU 漏洞为引介绍围绕 GPU 驱动这一攻击面，安全研究人员对内核漏洞利用技术做的一些探索。\n背景介绍\n目前移动 SOC 平台上由多个硬件模块组成，常见的硬件模块有：CPU、GPU、Modem基...",
|
|
|
|
|
|
"source": "subject",
|
|
|
|
|
|
"pubDate": "2024-12-06 09:00:00"
|
|
|
|
|
|
},
|
2024-12-05 09:49:17 +08:00
|
|
|
|
{
|
|
|
|
|
|
"guid": "https://forum.butian.net/share/3913",
|
|
|
|
|
|
"title": "qemu逃逸入门及例题复现",
|
|
|
|
|
|
"description": "本文章详细记录了笔者对qemu逃逸的理解，同时复现了两个经典的CTF中的qemu逃逸的题目，详细记录了复现的过程，希望对你学习qemu逃逸有所帮助",
|
|
|
|
|
|
"source": "subject",
|
|
|
|
|
|
"pubDate": "2024-12-05 09:36:56"
|
|
|
|
|
|
},
|
2024-12-05 00:03:51 +08:00
|
|
|
|
{
|
|
|
|
|
|
"guid": "https://forum.butian.net/share/3912",
|
|
|
|
|
|
"title": "基于ptrace的沙箱绕过",
|
|
|
|
|
|
"description": "本文记录复现羊城杯hard-sandbox这道题的过程，并在途中学习了基于ptrace的沙箱绕过",
|
|
|
|
|
|
"source": "subject",
|
|
|
|
|
|
"pubDate": "2024-12-04 10:00:01"
|
|
|
|
|
|
},
|
|
|
|
|
|
{
|
|
|
|
|
|
"guid": "https://forum.butian.net/share/3952",
|
|
|
|
|
|
"title": "多轮对话越狱大模型",
|
|
|
|
|
|
"description": "最近奇安信办的datacon有个AI安全赛道，其中的挑战之一就是与越狱相关的，不同的地方在于它关注的是多轮越狱",
|
|
|
|
|
|
"source": "subject",
|
|
|
|
|
|
"pubDate": "2024-12-04 09:00:02"
|
|
|
|
|
|
},
|
|
|
|
|
|
{
|
|
|
|
|
|
"guid": "https://forum.butian.net/share/3911",
|
|
|
|
|
|
"title": "Web Pwn常见利用方式总结",
|
|
|
|
|
|
"description": "本篇文章总结了web pwn常见的利用方式",
|
|
|
|
|
|
"source": "subject",
|
|
|
|
|
|
"pubDate": "2024-12-03 09:31:45"
|
|
|
|
|
|
},
|
2024-12-03 00:03:14 +08:00
|
|
|
|
{
|
|
|
|
|
|
"guid": "https://forum.butian.net/share/3916",
|
|
|
|
|
|
"title": "HKCERT24 Rev bashed 和 MBTI Radar WP",
|
|
|
|
|
|
"description": "周末的时候，打了hkcert24的比赛，里面很多题目设置很有趣，这里挑选其中rev方向的的bashed和MBTI Radar 记录一下wp",
|
|
|
|
|
|
"source": "subject",
|
|
|
|
|
|
"pubDate": "2024-12-02 10:05:50"
|
|
|
|
|
|
},
|
|
|
|
|
|
{
|
|
|
|
|
|
"guid": "https://forum.butian.net/share/3965",
|
|
|
|
|
|
"title": "【2024补天白帽城市沙龙-广州站】终端对抗的评估与验证实践",
|
|
|
|
|
|
"description": "演讲议题：终端对抗的评估与验证实践",
|
|
|
|
|
|
"source": "subject",
|
|
|
|
|
|
"pubDate": "2024-11-28 18:28:54"
|
|
|
|
|
|
},
|
|
|
|
|
|
{
|
|
|
|
|
|
"guid": "https://forum.butian.net/share/3964",
|
|
|
|
|
|
"title": "【2024补天白帽城市沙龙-广州站】蓝牙漏洞敞开大门：无需密码的致命安全隐患",
|
|
|
|
|
|
"description": "演讲议题：蓝牙漏洞敞开大门：无需密码的致命安全隐患",
|
|
|
|
|
|
"source": "subject",
|
|
|
|
|
|
"pubDate": "2024-11-28 18:21:29"
|
|
|
|
|
|
}
|
|
|
|
|
|
]
|
