📲 Debugging the Pixel 8 kernel via KGDB
Instructions for getting kernel log, building custom kernel, and enabling KGDB on Pixel 8
Andrey Konovalov
Security engineer focusing on fuzzers, exploits, and mitigations for Linux and Android kernels.
Latest posts
🤫 Unlocking secret ThinkPad functionality for emulating USB devices
Enabling and using xDCI controller on ThinkPad X1 Carbon 6th Gen
🔍 Looking for Remote Code Execution bugs in the Linux kernel
Using syzkaller to fuzz the Linux kernel network stack externally
🧾 Making offline Cardano transactions
Creating a wallet and signing transactions offline
🐧 Ruffling the penguin! How to fuzz the Linux kernel
An overview article about approaches to Linux kernel fuzzing. Written together with the HackMag Editorial Board based on the Fuzzing the Linux kernel talk I gave at PHDays 2021. This article is also available in Russian.
🌈 Highlighting syzkaller descriptions syntax with Rouge
Making syzlang snippets look awesome!
🧰 Describing new subsystems for syzkaller
A collection of tips on writing new syscall descriptions for syzkaller.
⏲ CVE-2017-18344: Exploiting an arbitrary-read vulnerability in the Linux kernel timer subsystem
A mini-article about CVE-2017-18344 — an arbitrary-read vulnerability I found in the Linux kernel timer subsystem. Contains a brief description of the /etc/shadow leak exploit I wrote for this bug. Originally posted as an announcement on the OSS-Security mailing list.
👽 CVE-2017-1000112: Exploiting an out-of-bounds bug in the Linux kernel UFO packets
A mini-article about CVE-2017-1000112 — a memory corruption vulnerability I found in the UDP Fragmentation Offload feature of the Linux kernel IP sockets. Contains a brief description of the Local Privilege Escalation exploit I wrote for this bug. Originally posted as an announcement on the OSS-Security mailing list.
🖥 Tips on improving security of Ubuntu Desktop
A few simple tips on how to improve the security of an Ubuntu Desktop (or Linux Mint) installation.