skip to content

algoatson.github.io ~/series/breaking-mitigations

❯ segfault@algoatson.github.io

breaking mitigations

4 parts~13 min rss

❯ start at part 1 ›

#1pwn the stack canary, from the source4 min

#2pwn PTR_MANGLE and hijacking the exit handlers3 min

#3pwn CET — shadow stacks, IBT, and what still works3 min

#4pwn PAC and MTE — how ARM64's new walls fall3 min