Zero Day, UID 0, and SUID Discovering a Local SUID Exploit

Although much has been written about software vulnerabilities, little has been made publicly available on how to go about discovering new ones. How does one go about discovering a brand new vulnerability and exploiting it? This paper will provide some insight, by examining a fictitious incident...

By

Jeff Pike

January 1, 2012

All papers are copyrighted. No re-posting of papers is permitted

Related Content

Penetration Testing and Red Teaming, Cyber Defense, Cybersecurity and IT Essentials, Open-Source Intelligence (OSINT), Digital Forensics and Incident Response

A Visual Summary of SANS New2Cyber Summit 2023

Check out these graphic recordings created in real-time throughout the event for SANS New2Cyber Summit 2023

Penetration Testing and Red Teaming, Cybersecurity and IT Essentials

January 4, 2023

Cloud Scanning for Vulnerability Discovery

In this article we'll look at the step-by-step process of scanning a cloud provider's network for target enumeration.

Cybersecurity and IT Essentials, Penetration Testing and Red Teaming

December 6, 2022

Don’t Miss the 2022 SANS Holiday Hack Challenge – Now Open for Free Play

SANS’s annual festive gift to the cyber community is back with a new supervillain to thwart.