Skip to content
Reviving the modprobe_path Technique: Overcoming search_binary_handler() Patch
theori.io | research | #privilege-escalation | #linux-kernel | #modprobe-path | #exploit-technique | #af-alg
Summary
A new spin on the classic modprobe_path privilege-escalation technique after the kernel removed the dummy-file trigger: Frontier Squad reaches call_modprobe via AF_ALG sockets and fileless chaining.
- Published
- Collected