Zero Day, UID 0, and SUID Discovering a Local SUID Exploit

Although much has been written about software vulnerabilities, little has been made publicly available on how to go about discovering new ones. How does one go about discovering a brand new vulnerability and exploiting it? This paper will provide some insight, by examining a fictitious incident...

By

Jeff Pike

January 1, 2012

All papers are copyrighted. No re-posting of papers is permitted

Related Content

Coolest Careers Poster

Cybersecurity and IT Essentials

SANSがおすすめするサイバーセキュリティの仕事20選: メディアエクスプロイテーションアナリスト

メディアエクスプロイテーションアナリストの主な業務や、スキルアップのためのSANSのおすすめのコースを紹介します！

Offensive Operations, Pen Testing, and Red Teaming, Cyber Defense, Cybersecurity and IT Essentials, Open-Source Intelligence (OSINT), Digital Forensics, Incident Response & Threat Hunting

A Visual Summary of SANS New2Cyber Summit 2023

Check out these graphic recordings created in real-time throughout the event for SANS New2Cyber Summit 2023

Offensive Operations, Pen Testing, and Red Teaming, Cybersecurity and IT Essentials

January 4, 2023

Cloud Scanning for Vulnerability Discovery

In this article we'll look at the step-by-step process of scanning a cloud provider's network for target enumeration.