[CONFERENCE] GreHack 2024

RandoriSec December 9, 2024 Conference

This year the GreHack edition was splitted on two days. The first day was related to the conference and the workshops and the second day was dedicated to the CTF. Same as last year, RandoriSec was a proud sponsor of the GreHack conference. Several RandoriSec consultants attended the conference. This blog post is a review of our favorite talks. Attacking hypervisors - A practical case – Corentin Bayet Slides In this conference, the speaker Corentin Bayet showed us how he conducted a vulnerability research targeting Virtualbox on Windows for PWN2OWN.

[CTF] GreHack 2024 - Babycaller challenge

Julian Francisco December 9, 2024 Ctf

Here is a writeup of a challenge I have written for Grehack 2024. Challenge task Yet another baby challenge… Provided files babycaller.tar.gz: bzImage : Kernel image run.sh : Bash script to run the VM entrypoint.sh : Bash script run in the docker to give an instance to a VM config : Kernel config babycaller.c : Kernel module source code initramfs.cpio.gz : Initramfs TL ; DR Leak KASLR using a format string Find a wrapper to list_del function Overwrite modprobe_path using list_del Get our flag :) 📖 Overview ♻️ Source code analysis The source code is short and straightforward:

[CONFERENCE] GreHack 2023

RandoriSec November 23, 2023 Conference

This year again we were a sponsor of the GreHack conference. Several consultants from RandoriSec attended the conference. As usual, you can find a quick review of our favorite talks. Virtualization from an attacker point-of-view : An introduction to VM escapes – Thomas BOUZERAR and Corentin BAYET Corentin presented to us this talk, which is about virtualization and its attack surfaces. Since this is a deep and complex topic, half of the talk is an introduction to virtualization concepts.

Categories

Tags