Overview
Syllabus
Intro
Topics
Goal
General idea
Disclaimer
Mac ports
Task ports
Send right
Zones
Catalog
Exploit treadmill
liolistio
kernel panic
mock messages
different types of messages
heap zones
heap in memory
reallocate heap
kcall
pan
pan bypass
block360ccn
vultureswap
mick
zuguza
thepark
Screenshot
Code
Expectations
Wintex exploit
gc vouchers
target voucher
allocation
voucher allocation
assumptions
garbage collection
time
control
memory pressure
readback
pointer leak
dangling voucher
iprequest
kread
fake port
k read
vortex leak
kernel leak
ref mitigations
pipes
nonblocking pipe
heap pointer to port
fake ports
kernel read
kernel zone map
vortex cell
conclusion
QA
Taught by
nullcon