 | Eternal-Tux: Crafting a Linux Kernel KSMBD 0-Click RCE Exploit from N-Days | 2025-09-14 | True | Unknown | True | | |
| A Syzkaller Summer: Fixing False Positive Soft Lockups in net/sched Fuzzing | 2025-09-10 | True | Unknown | True | | |
| corCTF 2024: Its Just a Dos Bug Bro - Leaking Flags from Filesystem with Spectre v1 | 2024-08-04 | True | Unknown | True | | |
| corCTF 2024 - Trojan Turtles: A KVM Escape Exploit from the L2 Guest to the L1 Hypervisor | 2024-08-04 | True | Unknown | True | | |
| corCTF 2023 sysruption - Exploiting Sysret on Linux in 2023 | 2023-08-03 | True | Unknown | True | | |
| corCTF 2023 smm-diary: Ropping in Ring -2 | 2023-08-03 | True | Unknown | True | | |
| EntryBleed: Breaking KASLR under KPTI with Prefetch (CVE-2022-4543) | 2022-12-16 | True | Unknown | True | | |
| Reviving Exploits Against Cred Structs - Six Byte Cross Cache Overflow to Leakless Data-Oriented Kernel Pwnage | 2022-08-17 | True | Unknown | True | | |
| zer0pts CTF 2022 kRCE writeup: Limited Userland Interface to Kernel RCE | 2022-03-20 | True | Unknown | True | | |
| CVE-2022-0185 - Winning a $31337 Bounty after Pwning Ubuntu and Escaping Google's KCTF Containers | 2022-01-25 | True | Unknown | True | | |
| pbctf 2021 Nightclub Writeup: More Fun with Linux Kernel Heap Notes! | 2021-10-11 | True | Unknown | True | | |
| corCTF 2021 Fire of Salvation Writeup: Utilizing msg_msg Objects for Arbitrary Read and Arbitrary Write in the Linux Kernel | 2021-08-26 | True | Unknown | True | | |
| corCTF 2021 ret2cds writeup: Escaping a Seccomp Sandbox via Class Data Sharing regions in OpenJDK | 2021-08-26 | True | Unknown | True | | |
| RedpwnCTF 2021 Chromium SBX Tasks Writeup (Empires and Deserts) | 2021-07-13 | True | Unknown | True | | |
| MidnightsunQuals 2021 BroHammer Writeup (Single Bit Flip to Kernel Privilege Escalation) | 2021-04-13 | True | Unknown | True | | |
| Turboflan PicoCTF 2021 Writeup (v8 + introductory turbofan pwnable) | 2021-04-06 | True | Unknown | True | | |
| zer0pts CTF 2021 Nasm-Kit Writeup (unicorn engine emulator escape) | 2021-03-07 | True | Unknown | True | | |
| DiceCTF 2021 HashBrown Writeup: From Kernel Module Hashmap Resize Race Condition to FG-KASLR Bypass | 2021-02-08 | True | Unknown | True | | |
| Rope2 HackTheBox Writeup (Chromium V8, FSOP + glibc heap, Linux Kernel heap pwnable) | 2021-01-16 | True | Unknown | True | | |
| Yet Another House ASIS Finals 2020 CTF Writeup | 2020-12-30 | True | Unknown | True | | |
| Intense HacktheBox Writeup | 2020-11-14 | True | Unknown | True | | |
| CUCTF 2020 Hotrod Kernel Writeup (Userfaultfd Race + Kernel UAF + Timerfd_Ctx Overwrite) | 2020-10-04 | True | Unknown | True | | |
| Player2 HacktheBox Writeup | 2020-06-27 | True | Unknown | True | | |
| RedpwnCTF 2020 Rust Pwn Writeups (Tetanus, Tetanus Shot) | 2020-06-26 | True | Unknown | True | | |
| RedpwnCTF 2020 Pwn Writeups (Four Function Heap, Zero the Hero) | 2020-06-26 | True | Unknown | True | | |
| Rope HacktheBox Writeup | 2020-05-23 | True | Unknown | True | | |
