Zero Day, UID 0, and SUID Discovering a Local SUID Exploit

Although much has been written about software vulnerabilities, little has been made publicly available on how to go about discovering new ones. How does one go about discovering a brand new vulnerability and exploiting it? This paper will provide some insight, by examining a fictitious incident...

By

Jeff Pike

January 1, 2012

All papers are copyrighted. No re-posting of papers is permitted

Related Content

Penetration Testing and Red Teaming, Cybersecurity and IT Essentials

January 4, 2023

Cloud Scanning for Vulnerability Discovery

In this article we'll look at the step-by-step process of scanning a cloud provider's network for target enumeration.

Cybersecurity and IT Essentials, Penetration Testing and Red Teaming

December 6, 2022

Don’t Miss the 2022 SANS Holiday Hack Challenge – Now Open for Free Play

SANS’s annual festive gift to the cyber community is back with a new supervillain to thwart.

Cybersecurity and IT Essentials, Cyber Defense, Penetration Testing and Red Teaming

Month of PowerShell - Discoveries from the Month of PowerShell

A final wrap-up from the Month of PowerShell: discoveries, recommendations, complaints, and successes.