[CONFERENCE] GreHack 2025

RandoriSec 12 Décembre 2025 Conference

Like last year, this year’s GreHack edition was split into two days, one for the conference and workshops and the other for the CTF. Once again, RandoriSec sponsored the event, and several RandoriSec consultants attended the conference. This blog post goes over a few of our favourite talks. CTF in a box ? The weirdest NETGEAR network switch 2021 exploit chain - Gynvael Coldwind In this talk, Gynvael took us on the adventure of how he chained multiple vulnerabilities to gain RCE on a NETGEAR Network Switch with full-root privileges.

[CONFERENCE] GreHack 2024

RandoriSec 9 Décembre 2024 Conference

This year the GreHack edition was splitted on two days. The first day was related to the conference and the workshops and the second day was dedicated to the CTF. Same as last year, RandoriSec was a proud sponsor of the GreHack conference. Several RandoriSec consultants attended the conference. This blog post is a review of our favorite talks. Attacking hypervisors - A practical case – Corentin Bayet Slides In this conference, the speaker Corentin Bayet showed us how he conducted a vulnerability research targeting Virtualbox on Windows for PWN2OWN.

[CTF] GreHack 2024 - Babycaller challenge

Julian Francisco 9 Décembre 2024 Ctf

Here is a writeup of a challenge I have written for Grehack 2024. Challenge task Yet another baby challenge… Provided files babycaller.tar.gz: bzImage : Kernel image run.sh : Bash script to run the VM entrypoint.sh : Bash script run in the docker to give an instance to a VM config : Kernel config babycaller.c : Kernel module source code initramfs.cpio.gz : Initramfs TL ; DR Leak KASLR using a format string Find a wrapper to list_del function Overwrite modprobe_path using list_del Get our flag :) 📖 Overview ♻️ Source code analysis The source code is short and straightforward:

[CONFERENCE] GreHack 2023

RandoriSec 23 Novembre 2023 Conference

This year again we were a sponsor of the GreHack conference. Several consultants from RandoriSec attended the conference. As usual, you can find a quick review of our favorite talks. Virtualization from an attacker point-of-view : An introduction to VM escapes – Thomas BOUZERAR and Corentin BAYET Corentin presented to us this talk, which is about virtualization and its attack surfaces. Since this is a deep and complex topic, half of the talk is an introduction to virtualization concepts.

Catégories

Tags