null@nothing:/posts $
-
Building AOSP & Setting Up a Native Debugging Environment
If you’ve ever wanted to step through the Android Runtime with a debugger, set breakpoints inside libart.so, you need to build AOSP from source. There’s no shortcut. The prebuilt SDK images that ship with Android Studio are stripped of debug symbols, and no corresponding symbol files are distributed. So even...
-
DirtyPipe-CVE-2022-0847
One of my friends, stdnoerr, wrote a blog about his N-day research on DirtyPipe (CVE-2022-0847). As a noob in kernel exploitation, I realized that I should be familiar with some Linux kernel internals to fully understand his blog. So I decided to explore those internals and write about my journey...
-
Demystifying the User Authentication in Linux
A Brief History In early Unix and Linux systems, user account information, including encrypted passwords, was stored in the /etc/passwd file. This file was readable by all users, which posed a significant security risk. Malicious users could potentially access the encrypted passwords and attempt to crack them offline. As security...