PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

A Kernel Hacker Meets Fuchsia OS

swarm.ptsecurity.com | research | #rootkit | #exploit-development | #fuchsia | #zircon | #microkernel
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Linux kernel hacker Alexander Popov evaluates Google's Fuchsia OS from an attacker's view: debugging Zircon with GDB/QEMU, fuzzing, and exploiting a C++ memory bug into a rootkit.
Published
Collected

Related coverage

research · blog.quarkslab.com
Playing Around With The Fuchsia Operating System
Quarkslab examines Google's Fuchsia OS: the Zircon microkernel design, its security model and mitigations, and attack surface exploration of the USB, Bluetooth stacks and hypervisor bugs.
research · portswigger.net
DOM based AngularJS sandbox escapes
Gareth Heyes develops a DOM-based AngularJS sandbox escape in the previously unexploitable orderBy filter, tracing the framework's sandbox history and exploit development.
research · portswigger.net
John Heasman is blogging
John Heasman, the author's NGS colleague and one of the most inventive security researchers, known for enterprise software bugs and rootkit research, has started blogging on software and web security.
research · starlabs.sg
[CVE-2025-39964] How I Found a $113,337 AF_ALG Linux Local Privilege Escalation Before Copy Fail
A retrospective on CVE-2025-39964, an AF_ALG race condition causing out-of-bounds scatterlist access in the Linux kernel. Exploitation yields root and a Docker container escape.
research · ethiack.com
Write Once, Shell Everywhere: Turning Arbitrary File Writes into RCE
Turning arbitrary file writes into RCE, from a DEF CON 34 talk: catalog known techniques, fingerprint the environment, and land shells on stripped containers lacking cron, SSH or package managers.
research · starlabs.sg
When AI Makes 0-Days Feel Like N-Days
The author used AI to find a UAF bug in Linux net/sched and built an LPE exploit for CentOS 9 at TyphoonPwn 2026. AI sped things up, but deep subsystem knowledge still mattered.
Back