admin/google-security-research
1
0
Fork 0
mirror of https://github.com/google/security-research synced 2026-06-08 14:27:23 +00:00
Code Issues Packages Projects Releases Wiki Activity
306 Commits 4 Branches 0 Tags
fc8097500f672efbc8c2db69bb333fec7fc0af1c
Commit Graph

306 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Chani Jindal fc8097500f Fix two regex issues in the github actions 
Directory name check wasn't allowing _2 https://google.github.io/security-research/kernelctf/rules.html#exploit-pr-file-structure

Regex in schema wasn't allowing mitigation-v3b
 2024-11-30 08:30:50 +00:00
Artem Metla 11d804414f kernelCTF: server: update to latest version 2024-11-22 13:22:04 +01:00
Stephen Roettger ec3bad89fe [v8ctf] M131 2024-11-13 09:22:06 +01:00
Eduardo' Vela" Nava (sirdarckcat) 88077ea2e1 clarify fixes and remove disclosure blob 2024-11-08 07:51:37 +01:00
Eduardo' Vela" Nava (sirdarckcat) d5cbd3f844 Add inception PoCs 
https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7031.html
 2024-11-07 21:01:30 +01:00
artmetla 817de537c7 Update upload-artifact in kernelctf-submission-verification.yaml 2024-10-25 14:21:27 +02:00
rcorrea35 424b22a3f1 Out of Bounds Write 
Integer wrap around to out of bounds write.
 2024-10-22 11:24:12 -04:00
rcorrea35 ffaeecc086 Uninitialized Memory POC 
Advisory - GHSA-3m8c-vvxw-r44w
 2024-10-22 11:21:51 -04:00
rcorrea35 3227c2aabe Delete pocs/LibRaw/poc.bin 2024-10-22 11:20:48 -04:00
rcorrea35 0a0cd4bb18 Add files via upload 
Uninitialized memory disclosure
 2024-10-22 11:19:33 -04:00
artmetla 5ba813ff20 Switch version for download-artifact from precise to general 2024-10-21 11:43:45 +02:00
artmetla 4cfc925540 Bump auth version in auto-releaser 2024-10-21 11:42:00 +02:00
artmetla 490d264024 Bump versions of auth and upload-cloud-storage in subm verification. 2024-10-21 11:40:57 +02:00
artmetla 38ca27a57e Bump versions of auth and upload-cloud-storage 2024-10-21 11:39:49 +02:00
Stephen Roettger c0b29d2adf [v8ctf] M130 2024-10-16 12:40:27 +02:00
Tamas Koczka 43a5a816c3 kernelCTF: GHA: add mitigation-v3b release without nftables 2024-09-27 21:30:52 +00:00
artmetla c6972fc46b Introduce FAQ section into kernelCTF guidelines. (#133) 
* Introduce FAQ section into kernelCTF guidelines.

Add FAQ section to guidelines and provide answer to the first question.

* Apply suggestions from code review

Co-authored-by: Tamás Koczka <poprdi@google.com>

---------

Co-authored-by: Tamás Koczka <poprdi@google.com>
 2024-09-26 12:50:02 +02:00
st424204 aac27fb643 Add kernelCTF CVE-2023-52447_cos (#105) 
* CVE-2023-52447_cos

* CVE-2023-52447_cos exploit.md

* improve success rate

* improve success rate2

* More explain at exploit.md

---------

Co-authored-by: Bing-Jhong Billy Jheng <billy@starlabs.sg>
 2024-09-26 11:11:34 +02:00
artmetla ebe282ba7b Update upload / download artifact to v4 in kernelctf-submission-verification.yaml 2024-09-25 17:42:19 +02:00
artmetla 54fe51676f Update upload / download artifact to v4 in kernelctf-release-build.yaml 2024-09-25 17:41:17 +02:00
st424204 08eb0b59d1 Add kernelCTF CVE-2024-26808_cos (#113) 
* CVE-2024-26808_cos

* upload exploit.md

* Make readable comments for exploit.c

* Update Makefile

* Update exploit.c

* Update Makefile

* Update Makefile

* Update exploit.md

* Update exploit.md

* Improve exploit.c

* More explain on exploit.c

* More explain on exploit.c

---------

Co-authored-by: Bing-Jhong Billy Jheng <billy@starlabs.sg>
Co-authored-by: M Ramdhan <n0psledbyte@gmail.com>
 2024-09-23 14:23:21 +02:00
conlonialC e60f9f2f38 Add kernelCTF CVE-2024-1085_cos (#108) 
* Add kernelctf CVE-2023-4569_lts

* change rop

* Add some infomation about the fix

* Add some infomation about the fix

* Add some infomation about the fix

* Add more details in exploit.md

* Add more details in exploit.md and exploit.c

* Add more details in exploit.md and exploit.c

* Add more details in exploit.md and exploit.c

* Add more details in exploit.md and exploit.c

* Fix some problems

* Fix some problems

* Add more details in exploit.md

* Add kernelCTF CVE-2024-1085_cos

* Add files

* Add files

* Fix files

* Fix files

* Fix files

* Fix files

* Change exploit.c

* Change exploit.c

* Change exploit.c

* Change exploit.c

* Change metadata.json

* Add more details in exploit.c

* Add more details in exploit.c and exploit.md

* add more details in exploit.c and exploit.md

---------

Co-authored-by: lonial con <kongln9170@gmail.com>
 2024-09-23 13:07:57 +02:00
Artem Metla 2596ed3827 kernelCTF: server: update to latest version 2024-09-23 12:05:59 +02:00
dependabot[bot] 597fc9e76e Bump actions/download-artifact (#132) 
Bumps the github_actions group with 1 update in the /.github/workflows directory: [actions/download-artifact](https://github.com/actions/download-artifact).


Updates `actions/download-artifact` from 3 to 4.1.7
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](https://github.com/actions/download-artifact/compare/v3...v4.1.7)

---
updated-dependencies:
- dependency-name: actions/download-artifact
  dependency-type: direct:production
  dependency-group: github_actions
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-09-23 11:15:49 +02:00
Stephen Roettger 1c6090d3d6 [v8ctf] M128 2024-09-18 14:01:59 +02:00
Lau d35192a76b kernelCTF: added CVE-2024-1086 lts mitigation (#96) 
* kernelCTF: added CVE-2024-1086 lts mitigation

* fix: musl-tools added

* fix: trying apt update to fix include issue?

* fix: tred fixing includes replacing musl-gcc with gcc. stability concerns?

* fix: reversed previous commit. invalid AVX512 instructions

* fix: tried including -mno-avx512f

* fix: tried replacing musl-gcc with gcc

* fix: reverse previous -mno-avx512f commit (it does not fix static glibc/ld/etc)

* fix: attempted fix by inversing include dirs, and added debug statements

* fix: added debug statements

* fix: added more debuig

* fix: added header files

* fix: added UAPI header files for lts

* fix: removed debug statements

* CVE-2024-1086: added more info to exploit (still incomplete)

* fix: completed exploit.md

* docs: added abbreviations for diagram

* docs: added references in code snippet

* docs: explained ip struct values in detail

* docs: included link to blogpost

* docs: fixed PUD pagetable layer nr

* docs: improved documentation for dirty pagetable technique

* docs: changed paths to external repo to relative path in repo

* Update novel-techniques.md

* test: kernelctf gcc static compile

* test: added libmnl-dev dependency for header

* fix: added libnftnl headers to dependencies

* test: switched to using apt installed headers

* fix: include header path

* fix: changed include path order

* fix: include with incorrect header paths

* fix: linux header include path

* chore: got rid of header bomb lol

* fix: asm headers

* fix: asm-generic headers (please let this be the last)

* fix: asm headers

* fix: got rid of header nuke

* chore: got rid of header nuke for real this time
 2024-09-12 15:04:33 +02:00
Tamás Koczka c0eac501cc kernelCTF: GHA: include "hidden" files (.config) in artifacts 2024-09-09 11:25:16 +02:00
lonialcon2 7f0fd3f5a3 Add kernelCTF CVE-2024-26581_lts_cos_mitigation (#109) 
* Add CVE-2024-1085_lts

* Change metadata.json

* Change exploit.c

* Change exploit.c

* Change exploit.c

* Change exploit.c

* Fix bug

* Fix bug

* Add more details

* Add CVE-2024-26581_lts_cos_mitigation

* Fix metadata.json

* Fix exploit

* Fix exploit

* Fix exploit

* Add more details in exploit.md

* Add more details in exploit.md

* Add more details in exploit.md

* Fix cos exploit.c

* Fix cos exploit.c

* Fix cos exploit.c

* Delete pocs/linux/kernelctf/CVE-2024-26581_lts_cos_mitigation/exploit/exploit

* add more details in exploit.md

* for stability test

* for stability test

* for stability test

* for stability test

* for stability test

* for stability test

* for stability test

---------

Co-authored-by: lonial con <kongln9170@gmail.com>
 2024-08-29 13:32:02 -07:00
conlonial 699139ff0e Add kernelCTF CVE-2024-26642_lts (#120) 
* Add CVE-2024-26642_lts

* Fix folder name

* Fix exploit.c

* Fix exploit.c

* Fix exploit.c

* Fix exploit.c

* Fix exploit.c

* Fix exploit.c

* Fix exploit.c

* Fix exploit.c

* Fix exploit.c

* Fix exploit.c

* Fix exploit.c

* Fix exploit.c

* Fix exploit.c

* Fix exploit.c

* Fix exploit.c

* Fix exploit.c

* Fix exploit.c

* Add more details in exploit.c and exploit.md

* Add more details in exploit.c and exploit.md

* for stability test

* for stability test

* for stability test

* for stability test
 2024-08-26 15:08:12 -07:00
Stephen Roettger 0080e43929 [v8ctf] M128 2024-08-21 09:06:59 +02:00
rcorrea35 448cfe310a Delete pocs/LibRaw/placeholder 2024-08-14 11:05:24 -04:00
rcorrea35 7e9338b231 LibRaw: Out of bounds write in LibRaw POC 2024-08-14 11:05:06 -04:00
rcorrea35 24770fbfc1 Create placeholder 2024-08-14 11:04:32 -04:00
rcorrea35 704c42f80a Delete pocs/poc.sr2.bin 2024-08-14 11:03:45 -04:00
rcorrea35 87be6e89c4 LibRaw: Out of bounds write 2024-08-14 10:36:38 -04:00
rcorrea35 4a49fec35a Delete pocs/LibRaw 2024-08-13 12:46:52 -04:00
rcorrea35 8a537b0b23 Create LibRaw 2024-08-13 12:46:19 -04:00
M Ramdhan 499284a767 kernelCTF CVE-2023-4208_lts_cos_mitigation (#116) 
* CVE-2023-4208_lts_cos_mitigation

* fix foo

---------

Co-authored-by: Bing-Jhong Billy Jheng <billy@starlabs.sg>
 2024-08-06 22:57:05 +02:00
st424204 0604f880d5 CVE-2023-4206_lts_cos/ (#114) 
Co-authored-by: Bing-Jhong Billy Jheng <billy@starlabs.sg>
 2024-08-06 22:55:44 +02:00
st424204 488be8d759 CVE-2023-4207_lts_cos (#115) 
Co-authored-by: Bing-Jhong Billy Jheng <billy@starlabs.sg>
 2024-08-06 22:50:59 +02:00
0x48 361a3fb22a Add kernelCTF CVE-2023-4623_lts_cos (#110) 
* Add CVE-2023-4623_lts_cos

* Remove unnecessary function

* Add comments

* Fix side-channel reliability

* Add docs

* Update Makefile

* Use seperate KASLR leak

* Make requested changes
 2024-08-02 17:00:06 +02:00
conlonial 0226d51745 Add kernelCTF CVE-2023-6817_lts_cos (#90) 
* Add CVE-2023-6817_lts_cos

* Add exploit

* Change exploit

* Add more details

* Add more details

* Add more details

* Fix some errors
 2024-07-29 13:01:36 +02:00
Stephen Roettger cd9dcada61 [v8ctf] M127 2024-07-24 09:06:10 +02:00
Marios Pomonis 1bb2f8c8d9 Further clarify the scope of kvmCTF. 2024-07-10 09:56:10 -07:00
HexRabbit 5c8c44e796 Add kernelCTF CVE-2024-26925_lts_cos (#106) 
* Update CVE-2024-26925_lts_cos

* Use softlink to merge all files

* Update exploit.md

* Update vulnerability.md
 2024-07-03 14:30:56 -07:00
Marios Pomonis fa6e35bb62 Update kvmCTF rules to reflect that CPU-based vulns are out ofscope. 2024-07-03 10:48:20 -07:00
Marios Pomonis e15e3259e0 Fixed link to bucket. 2024-06-28 10:42:21 -07:00
kevinrich1337 a571ac2847 Add kernelCTF CVE-2024-0193_lts (#102) 
* Add kernelCTF CVE-2024-0193_lts

* update exploit.md and exploit.c

* Update exploit.c
 2024-06-27 14:15:50 -07:00
Marios Pomonis b0cd094f27 Update the kvmCTF rules. 
Provides instructions on how to reserve timeslots, test your exploits
and submit your reports, as well as rewards updats.
 2024-06-27 09:19:24 -07:00
kevinrich1337 96660a1c56 Add kernelCTF CVE-2024-0193_cos (#103) 
* Add kernelCTF CVE-2024-0193_cos

* change submission id

* update exploit.md and exploit.c
 2024-06-21 11:06:31 -07:00