4 ms·
I think they already don't. eBPF has become a favorite jumping point for exploit chains that can very quickly escalate some read/write gadget into full executio
by stefan_ 5y ago
I think they already don't. eBPF has become a favorite jumping point for exploit chains that can very quickly escalate some read/write gadget into full execution.
- kingforaday 5y agoI would love to read an in depth breakdown of an exploit using eBPF as part of its execution chain. Do you happen to have an example/link?
- stefan_ 5y agoThis was the one I was thinking of: https://googleprojectzero.blogspot.com/2020/ https://googleprojectzero.blogspot.com/2020/ Scroll down to "The ultimate ROP"