Phase 1: Massive Reconnaissance with SkuntScan

Every engagement starts with comprehensive reconnaissance. SkuntScan, our in‑house tool, combines passive enumeration with intelligent fingerprinting. It scrapes certificate transparency logs, DNS records, web archives, and then correlates everything with IP space to build a complete map of the target.

Advanced Linux Kernel Exploitation Techniques

Thu, 27 Mar 2025 00:00:00 +0000

Introduction to Linux Kernel Exploitation

Kernel exploitation sits at the top of the difficulty curve in offensive security, and for good reason. Userspace bugs get you code execution as some unprivileged process, but the kernel runs at Ring 0 (or EL1, if you’re on ARM) with unrestricted access to physical memory, every process’s address space, and every privilege check on the system. Pop a bug in the kernel and you’re not just compromising an application, you’re compromising the thing that enforces the rules for every application on the box. That’s why a single kernel LPE (local privilege escalation) bug is often worth more on the exploit market than a browser RCE: it’s the last mile between “I have a foothold” and “I own the machine.”

Exploitation on Prepakis Georgios | Kernelstub | Security Researcher

A Full Infrastructure Takeover on GSIS.GR

Phase 1: Massive Reconnaissance with SkuntScan

Advanced Linux Kernel Exploitation Techniques

Introduction to Linux Kernel Exploitation