Android Kernel LPE Classes, at Invariant Level, Plus a Userspace TOCTOU Lab

Futex, perf_event, and get_user-era Android kernel LPE classes as broken invariants. No kernel exploit code. A toy C file-TOCTOU analog, a planted strcpy, ASAN output.

June 20, 2024 · 8 min · 1548 words · Jose Adalberto Gutierrez Ochoa

Print Spooler LPE Class Lessons for Operators

Lab spooler service ACL and RPC interface dump, Point-and-Print registry, 7036/808 logs — no spool exploit.

September 27, 2022 · 6 min · 1156 words · Jose Adalberto Gutierrez Ochoa