PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

All your tracing are belong to BPF

blog.trailofbits.com | blog | #linux | #kernel | #tutorial | #observability | #tracing | #bpf
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

A hands-on introduction to Linux BPF tracing without specialized tooling: event sources, dynamic and static instrumentation, plus maps and perf outputs, ending with a syscall-counting program.
Published
Collected

Related coverage

blog · projectdiscovery.io
Getting Started with ProjectDiscovery in Linux and Windows
A step-by-step guide to installing ProjectDiscovery tools like Nuclei, Subfinder, and Katana on Linux and Windows, covering Go installation, PATH configuration, and fixing common CLI errors.
blog · osec.io
Solana: an auditor’s introduction
OtterSec's security-focused introduction to Solana: the execution model, accounts and the BPF loader, program invocations, and the security boundaries attackers operate within.
blog · projectzero.google
Taking a page from the kernel's book: A TLB issue in mremap()
This is a technical blog post about TLB flushing bugs in kernels, intended for people interested in kernel security and memory management.
blog · projectzero.google
Exploiting Recursion in the Linux Kernel
A report on an arbitrary recursion bug in the Linux kernel, triggerable by a local user on Ubuntu systems installed with home directory encryption support, with exploit code published.
research · github.com
Infinity Core: Linux Kernel Core Subsystems LPE and Container Escape Research
Unlike most modern Linux kernel exploits that depend on networking, eBPF, or unprivileged user namespaces, these vulnerabilities reside in fundamental kernel core subsystems, rendering standard container sandboxes and Android application domain restrictions ineffective against local privilege escalation.
vulnerability · projectzero.google
Exploiting the Linux kernel via packet sockets
A guest post describing CVE-2017-7308, a signedness bug in Linux packet sockets leading to a heap out-of-bounds write and local privilege escalation, found via syzkaller.
Back