Copy Fail Explained Simply

Copy Fail is one of those vulnerabilities that sounds insanely complicated. until you actually see the exploit flow step-by-step.

// Chapters

0:00 - Intro
0:17 - Demo of the Exploit
1:17 - Linux Page Cache
1:57 - Sockets
2:20 - AF ALG Socket
3:00 - Using AF ALG Socket
3:56 - Authencesn
4:44 - Authencesn: Decryption Process
5:47 - Authencesn: Logic Flaw
6:23 - Authencesn: HMAC Computation
6:57 - Shell Injection Flow
8:33 - Exploit Script: Overview
9:16 - Exploit Script: Analysis Part 1
10:39 - Exploit Script: Analysis Part 2
12:58 - Decoding the Payload

// Links

* Copy Fail Technical Analysis: https://xint.io/blog/copy-fail-linux-distributions

// Tags

#cybersecurity #linux #exploitdevelopment