Milot's Braindump

Milot's Braindump

Dissecting pkexec (CVE-2021-4034) vulnerability

Polkit is a crucial component for controlling system-wide privileges in Linux (and other Unix-like systems such as BSD), similar to sudo. Initially it was released in May 2009 under the name PolicyKit and later it was renamed, it contained a critical local privilege escalation vulnerability for 12 years, until it

C Programming Featured

Revisiting an old Apache exploit

Photo by Gabriel Heinzer [https://unsplash.com/@6heinz3r?utm_source=ghost&utm_medium=referral&utm_campaign=api-credit] / Unsplash [https://unsplash.com/?utm_source=ghost&utm_medium=referral&utm_campaign=api-credit] My last blog posts were 10 years ago when I was quite active, unfortunately only two previous posts survived various

C++ Programming

Fibonacci Sequence and C++ template meta-programming

As most of other fellow geeks, I am a big fan of science fiction movies and of course science in general. I watched Fringe (a SciFi TV show) very frequently and as it was progressing I saw lots of glyphs from real-world science and I encountered the above glyph a

C Programming Featured

Virtual Functions in C

At first I had no idea because C is not an object oriented programming language and there is no such thing as inheritance, but having some experience with C and knowing how virtual functions work I was thinking that there must be a way to mimic the virtual function