HackMag

  • News
  • Mobile
  • Security
  • Malware
  • Coding
  • Unix
  • DevOps
  • HackMag

  • News
  • Mobile
  • Security
  • Malware
  • Coding
  • Unix
  • DevOps

Sad Guard. Identifying and exploiting vulnerability in AdGuard driver for Windows

Date: 20/04/2023

Author: Marsel Shagiev

Last year, I discovered a binary bug in the AdGuard driver. Its ID in the National Vulnerability Database is CVE-2022-45770. I was disassembling the ad blocker and found a way to use the identified vulnerability for local privilege escalation. As a bonus, this article gives insight into the low-level Windows structure.
Read full article →

Quarrel on the heap. Heap exploitation on a vulnerable SOAP server in Linux

Date: 01/06/2022

Author: Marsel Shagiev

This paper discusses a challenging CTF-like task. Your goal is to get remote code execution on a SOAP server. All exploitation primitives are involved with the heap in one way or another; so, you’ll learn a lot about functions interacting with it. Also, you’ll reverse a Linux binary using a dynamic instrumentation framework.
Read full article →

HackMag.com © 2025

Privacy Policy | Cookie Policy