Container Escape Class Lessons (CVE-2022-0185-Era Themes)
Lab capsh –print and docker inspect seccomp/AppArmor, dropped caps, failed mount — no escape exploit.
Linux
Dirty Pipe Class Analysis for Defenders
Toy splice/pipe lab on a temp file we own, uname -r vs CVE-2022-0847, SIGSEGV on a PROT_READ map — not a setuid hijack.
ASLR, PIE Bias, and a Lab Pointer Leak
/proc/self/maps across runs, gdb measurement of PIE load bias, a toy %p leak of a text pointer. Entropy is what remains after the leak — no exploit chain.
Linux LKM and Syscall Hooking Concepts for Defenders
Lab LKM that logs openat on a VM, insmod/rmmod, dmesg artifacts — module does not hide files or hook the table for concealment.
Format String Lab: Leak, Crash, and the %s Patch
Toy printf(user) lab: gdb dump of stack words matching a %p leak (canary included conceptually), SIGSEGV from %s, ASan on a sprintf companion, patched printf("%s", user).