Techniques Index
May 20, 2026 · View on GitHub
modprobe_path overwrite
Representative challenges:
- ASIS CTF Finals 2025 / KList — simple OOB write
- NexHunt CTF 2025 / below — OOB read/write
- UIUCTF 2025 / Baby Kernel — tty_struct ops hijack
- PatriotCTF 2025 / switchboard — kmalloc-32 UAF
- ASIS CTF Quals 2021 / Mini memo — msg_msg + pipe_buffer + freelist poisoning
- TSG CTF 2021 / lkgit — userfaultfd race + seq_operations leak
- TAMUctf 2022 / Shmeeky — integer overflow + OOB R/W
- 3kCTF-2021 / echo — direct AAR/AAW syscall
Many other challenges also end with modprobe_path overwrite.
For the full list, search modprobe_path overwrite in the top-level Challenge List.
modprobe_path overwrite は該当問題が多いため、ここでは代表例のみを掲載しています。
全件はトップ README の Challenge List で modprobe_path overwrite を検索してください。
pipe_buffer / Dirty Pipe
- b01lers CTF 2026 / throughthewall
- Codegate CTF 2025 Preliminary / pew
- BackdoorCTF 2024 / Kuwu
- IERAE CTF 2024 / free2free
- HITCON CTF 2023 Quals / Full Chain - Wall Rose
- HeroCTF v6 / Buafllet
- bi0sCTF 2024 / palindromatic
seq_operations overlap
- bi0sCTF 2022 / k32
- SUSCTF 2022 / kqueue's revenge
- TSG CTF 2021 / lkgit
- SECCON 2020 Online CTF / kstack
tty_struct hijacking
- UIUCTF 2025 / Baby Kernel
- TFC_CTF_2025 / SLOTS
- TSJ CTF 2022 / clipboard.ko
- 3kCTF-2021 / klibrary
- zer0pts CTF 2020 / meowmow
- InCTF 2020 / lab9
userfaultfd race / UFFD-assisted exploitation
- BackdoorCTF 2023 / EmpDB
- TSG CTF 2021 / lkgit
- 3kCTF-2021 / klibrary
- DiceCTF 2021 / hashbrown
- SUSCTF 2022 / kqueue's revenge
- HITCON CTF 2022 / Fourchain - Kernel
- corCTF 2021 / Fire of Salvation
- SECCON 2020 Online CTF / kstack
DirtyCred
msg_msg
- BackdoorCTF 2024 / Kuwu
- bi0sCTF 2024 / palindromatic
- ASIS CTF Quals 2021 / Mini memo
- HITCON CTF 2020 / atoms
- pbctf 2021 / Nightclub
KPTI trampoline / kernel ROP
- K3RN3LCTF / Easy kernel is still kernel right?
- NahamCon CTF 2025 / The Jumps
- hxp CTF 2020 / kernel-rop
- SECCON 2020 Online CTF / kstack
- m0leCon CTF 2020 Teaser / babyk
- zer0pts CTF 2022 / kRCE
- SUSCTF 2022 / kqueue's revenge
- DownUnderCTF 2022 / just-in-kernel
- Hack.lu CTF 2021 / Stonks Socket
- SECCON CTF 2021 / kone_gadget
- BackdoorCTF 2025 / skernel
- DiceCTF 2025 Quals / oboe
FG-KASLR / ksymtab
eBPF
- DownUnderCTF 2025 / Rolling Around
- SECCON CTF 2022 Quals / babypf
- Google Capture The Flag 2021 / EBPF
- WannaGame Championship 2025 / Matrix