Explore exploit engineering techniques for attacking the Linux kernel in this OffensiveCon23 conference talk by Alex Plaskett and Cedric Halbronn. Delve into Linux Privilege Escalation (LPE) attack surface mapping, focusing on unprivileged user namespaces, network namespaces, and mount namespaces. Learn about targeted functionality fuzzing, manual crash triaging, and Syzbot testcase triage automation. Examine vulnerability exploitation strategies, including replacement objects, set field abuse, and object spraying techniques. Gain insights into the SLUB allocator's enhanced understanding, exploring lockless freelist vs. regular freelist concepts. Discover practical skills such as priming kmalloc-96 main slab free lists, executing gdb commands for objects, and manually building kernels. The talk also covers disclosure timelines, TargetMob architecture, and mining and testing pipelines for kernel exploitation.