2 ms·
In addition to the original EntryBleed article, https://exploits.forsale/24h2-nt-exploit/ https://exploits.forsale/24h2-nt-exploit/ and the corresponding https:
by bri3d 1y ago
In addition to the original EntryBleed article, https://exploits.forsale/24h2-nt-exploit/ https://exploits.forsale/24h2-nt-exploit/ and the corresponding https://github.com/exploits-forsale/prefetch-tool https://github.com/exploits-forsale/prefetch-tool are useful for understanding the same exploit on Windows (which works the exact same way, of course).
- eigenform 1y ago(Sorry for the self-plug but) I also wrote a bit about the behavior of PREFETCH recently in case anyone is interested in this sort of thing. See this example (for Linux on AMD): https://github.com/eigenform/perfect/blob/e5da0c693ba5d1b654b7cc956ac835d83aec032d/perfect-zen2/src/bin/prefetch.rs#L14C1-L82C4 https://github.com/eigenform/perfect/blob/e5da0c693ba5d1b654... .. and here's another example in the case of EntryBleed: https://github.com/eigenform/perfect/blob/e5da0c693ba5d1b654b7cc956ac835d83aec032d/perfect-zen2/src/bin/entrybleed.rs#L41C1-L109C4 https://github.com/eigenform/perfect/blob/e5da0c693ba5d1b654...