Exploiting Race Conditions Using the Scheduler
Explore techniques for exploiting race conditions in Linux and Android using scheduler manipulation, focusing on real-world vulnerabilities and practical exploitation strategies.
Attacking iPhone XS Max
Explore iPhone XS Max vulnerabilities, including PAC implementation, XNU bug exploitation, and kernel read/write access. Learn about Unix Domain Socket, race conditions, and unprotected control flow transfer points.
Using Race Conditions in Correct Concurrent Software
Explore how race conditions can be leveraged to improve performance in concurrent systems, focusing on lock-free algorithms and high-throughput lock acquisition techniques.
The Voight-Kampff Test for Discovering Web Application Vulnerabilities
Explore techniques to differentiate between human-discovered and machine-detected web app vulnerabilities, with insights on manual setup, chain exploits, and real-world case studies.
Racing the Dark - A New TOCTTOU Story From Apple's Core
Unveils macOS kernel vulnerabilities, highlighting memory mapping issues and race conditions that bypass security updates. Emphasizes the need to reevaluate macOS/iOS memory mapping mechanisms.
Devils Are in the File Descriptors - It Is Time To Catch Them All
Explore vulnerabilities in Linux kernel file descriptor operations, focusing on high-risk scenarios in exporting and importing, and learn to identify and address these security concerns.
Race Conditions in JavaScript Apps
Explore common race conditions in JavaScript and learn strategies to prevent them in real-time collaborative applications, based on practical experience.
Logrotten - It's Not a Bug
Sicherheitslücke in Logrotate: Ausnutzung, Auswirkungen und Reichweite. Demonstration der Schwachstelle, Einfluss auf andere Softwarepakete und aktueller Stand von Logrotate werden diskutiert.
Xenpwn - Breaking Paravirtualized Devices
Explore vulnerabilities in paravirtualized devices using Xenpwn, a hypervisor-based memory access tracing tool, to discover critical security flaws in Xen hypervisor drivers.
Designing Distributed Systems with TLA+
Learn to design and test distributed systems using TLA+, a powerful specification language that complements unit testing and type systems for catching complex concurrency bugs and validating system designs.
CQRS Pitfalls and Patterns
Explore CQRS pitfalls, best practices, and architectural patterns with Udi Dahan. Learn when to use CQRS effectively and how to avoid common mistakes in system design.
Bochspwn - Identifying 0-Days via System-Wide Memory Access Pattern Analysis
Innovative approach to discovering kernel vulnerabilities using CPU-level instrumentation and memory access pattern analysis. Introduces "Bochspwn" project, which identified numerous Windows kernel vulnerabilities.
Introduction to Code Sanitizers
Explore code sanitizing tools for detecting memory corruptions, race conditions, and undefined behavior in programs. Learn about Valgrind, AddressSanitizer, ThreadSanitizer, and UndefinedBehaviorSanitizer.
Here's My Number; Call Me, Maybe - Callbacks in a Multithreaded World
Explore techniques for managing callbacks in multithreaded applications, focusing on clarity, object lifetime management, and preventing dangling references in C++ programming.
An Adventure in Race Conditions
Explore high-level abstractions for concurrent programming, avoiding common traps with locks and atomics. Learn strategies to prevent and detect race conditions in C++ development.
Time Brings All Things to Pass
Explore techniques for reliable testing of parallel software, including handling race conditions and timeouts. Learn to create a deterministic testing environment using innovative models and approaches.
Multithreading is the Answer. What Was the Question? - Part I
Explore multithreading concepts, challenges, and solutions in C++ development. Learn when to use or avoid multithreaded code, and discover techniques for improved readability and maintainability.
What Neighborhoods Owe Each Other - Rights, Duties, Immunities & Disabilities of Functions & Objects
Explore how functions and objects form relationships in programming, using legal concepts to understand resource management, aliasing, and concurrency issues in C++.
Hands-On Web App Test Automation
Learn to build reliable automated tests for web apps using Python, pytest, and Selenium. Hands-on project testing DuckDuckGo searches, covering browser switching and avoiding race conditions.
Python Concurrency - From Beginner to Pro
Comprehensive guide to Python concurrency, covering processes, threads, modules, race conditions, and the GIL. Includes coding examples and activities to build a multithreaded and multiprocessing web server.
Taking Charge of Your Race Conditions
Explore techniques for testing and managing race conditions in concurrent programming, focusing on Python tools and strategies to identify, reproduce, and resolve these challenging scenarios.