Zero Day, UID 0, and SUID Discovering a Local SUID Exploit

Although much has been written about software vulnerabilities, little has been made publicly available on how to go about discovering new ones. How does one go about discovering a brand new vulnerability and exploiting it? This paper will provide some insight, by examining a fictitious incident...

By

Jeff Pike

January 1, 2012

All papers are copyrighted. No re-posting of papers is permitted

Related Content

SCA_Blog_Cyber Skills Shortage_340 x 340.jpg

Cybersecurity and IT Essentials

Cyber Skills Shortage: SANS Institute to Triple Academy Cybersecurity Scholarships By 2026

The cost of a bad hire in cybersecurity isn’t just about money, it’s about risk, downtime, lost productivity, and missed opportunities.

Offensive Operations, Pen Testing, and Red Teaming, Penetration Testing and Red Teaming, Cybersecurity and IT Essentials, Cyber Defense

Month of PowerShell: Fileless Malware with Get-Clipboard

Let's take a look at a sneaky attack to use PowerShell maliciously while evading detection (and some ways to detect it).

Cyber Defense, Cybersecurity and IT Essentials

Month of PowerShell: Solving Problems (DeepBlueCLI, Syslog, and JSON)

Let's look at an example of problem solving using PowerShell with DeepBlueCLI, Syslog, and JSON data.