Serenity - gurlic

Hagbard

Jun 3

I got the chance to investigate an interesting bug in SerenityOS this week. It was related to the decoding of JPG images in the operating system. For some reason, when a JPG image is viewed, it comes out like this:

How malloc broke Serenity's JPGLoader, or: how to win the lottery - sin-ack's writings

https://sin-ack.github.io/posts/jpg-loader-bork

Hagbard

May 29

I quit my job to focus on SerenityOS full time – Andreas Kling – I like computers!

https://awesomekling.github.io/I-quit-my-job-to-focus-on-SerenityOS-full-time

Root

Apr 13

OS hacking: Showing progress during long-running FileManager operations

SerenityOS is open source on GitHub: https://github.com/SerenityOS/serenity Discord: https://discord.gg/29gCcKsXkF Merch: https://teespring.com/stores/serenityos Follow me on Twitter: https://twitter.com/awesomekling Sponsor me on GitHub: https://github.com/sponsors/awesomekling Support me on Patreon: https://patreon.com/serenityos Donate via Paypal: https://paypal.me/awesomekling SerenityOS is

https://youtu.be/TihlhcWL_7U

Root

Mar 29

Let's port Duke Nukem 3D to SerenityOS

I'm here to port games and chew bubblegum, and I'm all outta gum. JonoF's Duke Nukem 3D Port: https://github.com/jonof/jfduke3d SerenityOS is open source on GitHub: https://github.com/SerenityOS/serenity Merch: https://teespring.com/stores/serenityos Follow me on Twitter: https://twitter.com/awesomekling Sponsor me on GitHub: https://github.com/sponsors/awesomekling Support me on Patreon: https:/

https://www.youtube.com/watch?v=xy1uynuUyPo

Root

Mar 26

OS hacking: Taking PNG screenshots in SerenityOS

SerenityOS is open source on GitHub: https://github.com/SerenityOS/serenity Merch: https://teespring.com/stores/serenityos Follow me on Twitter: https://twitter.com/awesomekling Sponsor me on GitHub: https://github.com/sponsors/awesomekling Support me on Patreon: https://patreon.com/serenityos Donate via Paypal: https://paypal.me/awesomekling SerenityOS is a Unix-like operating system that I'm im

https://www.youtube.com/watch?v=3BF-vUts3ws

Root

Mar 21

Browser hacking: Let's profile and optimize LibJS to improve the "Canvas Cycle" demo!

Previous episode: https://www.youtube.com/watch?v=b3a5V45LLss SerenityOS is open source on GitHub: https://github.com/SerenityOS/serenity Merch: https://teespring.com/stores/serenityos Follow me on Twitter: https://twitter.com/awesomekling Sponsor me on GitHub: https://github.com/sponsors/awesomekling Support me on Patreon: https://patreon.com/serenityos Donate via Paypal: https://paypal.me/aweso

https://youtu.be/tGmaO8agfY4

Root

Mar 16

Browser hacking: Let's get the "Canvas Cycle" JS demo running in our Browser!

Canvas Cycle demo: http://www.effectgames.com/demos/canvascycle/ SerenityOS is open source on GitHub: https://github.com/SerenityOS/serenity Merch: https://teespring.com/stores/serenityos Follow me on Twitter: https://twitter.com/awesomekling Sponsor me on GitHub: https://github.com/sponsors/awesomekling Support me on Patreon: https://patreon.com/serenityos Donate via Paypal: https://paypal.me/aw

https://youtu.be/b3a5V45LLss

Root

Mar 10

OS hacking: Write-protecting sensitive process variables (UID and more)

SerenityOS is open source on GitHub: https://github.com/SerenityOS/serenity Merch: https://teespring.com/stores/serenityos Follow me on Twitter: https://twitter.com/awesomekling Sponsor me on GitHub: https://github.com/sponsors/awesomekling Support me on Patreon: https://patreon.com/serenityos Donate via Paypal: https://paypal.me/awesomekling SerenityOS is a Unix-like operating system that I'm im

https://youtu.be/IvtM6bqB3uY

1

Root

Mar 5

Let's port Diablo to SerenityOS!

devilutionX on GitHub: https://github.com/diasurgical/devilutionX SerenityOS is open source on GitHub: https://github.com/SerenityOS/serenity Merch: https://teespring.com/stores/serenityos Follow me on Twitter: https://twitter.com/awesomekling Sponsor me on GitHub: https://github.com/sponsors/awesomekling Support me on Patreon: https://patreon.com/serenityos Donate via Paypal: https://paypal.me/a

https://youtu.be/ZOzZ8R4gphE

Root

Feb 22

Browser hacking: Let's do some work on CSS overflow!

SerenityOS is open source on GitHub: https://github.com/SerenityOS/serenity Merch: https://teespring.com/stores/serenityos Follow me on Twitter: https://twitter.com/awesomekling Sponsor me on GitHub: https://github.com/sponsors/awesomekling Support me on Patreon: https://patreon.com/serenityos Donate via Paypal: https://paypal.me/awesomekling SerenityOS is a Unix-like operating system that I'm im

https://youtu.be/39yyYYItte8

Root

Feb 18

OS hacking: Hardening ELF executables with RELRO

RedHat article about RELRO: https://www.redhat.com/en/blog/hardening-elf-binaries-using-relocation-read-only-relro SerenityOS is open source on GitHub: https://github.com/SerenityOS/serenity Merch: https://teespring.com/stores/serenityos Follow me on Twitter: https://twitter.com/awesomekling Sponsor me on GitHub: https://github.com/sponsors/awesomekling Support me on Patreon: https://patreon.com/

https://youtu.be/7kWSqqZCUcE

Root

Feb 13

SerenityOS developer interview: Linus Groh

I think it's time we get to know some of the other people working on SerenityOS, so today we talk to one of our developers: Linus Groh! Linus on Twitter: https://twitter.com/linusgroh Linus on GitHub: https://github.com/linusg Linus on the WWW: https://linus.dev/ ..and then my usual video description: SerenityOS is open source on GitHub: https://github.com/SerenityOS/serenity Merch: https://t

https://youtu.be/oG8RSX1hyCg

Root

Feb 10

Browser hacking: Reimplementing text inputs with Shadow DOM

SerenityOS is open source on GitHub: https://github.com/SerenityOS/serenity Merch: https://teespring.com/stores/serenityos Follow me on Twitter: https://twitter.com/awesomekling Sponsor me on GitHub: https://github.com/sponsors/awesomekling Support me on Patreon: https://patreon.com/serenityos Donate via Paypal: https://paypal.me/awesomekling SerenityOS is a Unix-like operating system that I'm im

https://youtu.be/KuocOzRP9gQ

1

Root

Feb 2

OS hacking: System call origin verification (à la OpenBSD)

The LWN article: https://lwn.net/Articles/806776/ SerenityOS is open source on GitHub: https://github.com/SerenityOS/serenity Merch: https://teespring.com/stores/serenityos Follow me on Twitter: https://twitter.com/awesomekling Sponsor me on GitHub: https://github.com/sponsors/awesomekling Support me on Patreon: https://patreon.com/serenityos Donate via Paypal: https://paypal.me/awesomekling Ser

https://youtu.be/CMo48OCkEbc

Root

Jan 28

OS hacking: Address Space Layout Randomization (ASLR) for shared libraries

After a week of writing exploits for SerenityOS, let's start implementing some security mitigations that will make future exploitation harder! :^) SerenityOS is open source on GitHub: https://github.com/SerenityOS/serenity Merch: https://teespring.com/stores/serenityos Follow me on Twitter: https://twitter.com/awesomekling Sponsor me on GitHub: https://github.com/sponsors/awesomekling Support me

https://youtu.be/BL0PekL_OAo

Root

Jan 26

OS haxx0ring: Local root exploit via partial munmap() kernel flaw

SerenityOS is open source on GitHub: https://github.com/SerenityOS/serenity Merch: https://teespring.com/stores/serenityos Follow me on Twitter: https://twitter.com/awesomekling Sponsor me on GitHub: https://github.com/sponsors/awesomekling Support me on Patreon: https://patreon.com/serenityos Donate via Paypal: https://paypal.me/awesomekling SerenityOS is a Unix-like operating system that I'm im

https://www.youtube.com/watch?v=gt6-TC6FtMs

1

Root

Jan 24

Browser haxx0ring: Let's write an exploit for an integer overflow in JavaScript typed arrays

SerenityOS is open source on GitHub: https://github.com/SerenityOS/serenity Merch: https://teespring.com/stores/serenityos Follow me on Twitter: https://twitter.com/awesomekling Sponsor me on GitHub: https://github.com/sponsors/awesomekling Support me on Patreon: https://patreon.com/serenityos Donate via Paypal: https://paypal.me/awesomekling SerenityOS is a Unix-like operating system that I'm im

https://www.youtube.com/watch?v=LMvjaoBLPxA

Root

Jan 21

OS haxx0ring: Let's write a local root exploit for a bug in "passwd" (and then fix the bug!)

SerenityOS is open source on GitHub: https://github.com/SerenityOS/serenity Merch: https://teespring.com/stores/serenityos Follow me on Twitter: https://twitter.com/awesomekling Sponsor me on GitHub: https://github.com/sponsors/awesomekling Support me on Patreon: https://patreon.com/serenityos Donate via Paypal: https://paypal.me/awesomekling SerenityOS is a Unix-like operating system that I'm im

https://youtu.be/UuSH4qMNaYo

1

Root

Jan 19

OS hacking: Symlink & hardlink protections

SerenityOS is open source on GitHub: https://github.com/SerenityOS/serenity Merch: https://teespring.com/stores/serenityos Follow me on Twitter: https://twitter.com/awesomekling Sponsor me on GitHub: https://github.com/sponsors/awesomekling Support me on Patreon: https://patreon.com/serenityos Donate via Paypal: https://paypal.me/awesomekling SerenityOS is a Unix-like operating system that I'm im

https://youtu.be/ODN_TLae0Iw

Root

Jan 18

Browser hacking: Let's build a crappy CSS flexbox

SerenityOS is open source on GitHub: https://github.com/SerenityOS/serenity Merch: https://teespring.com/stores/serenityos Follow me on Twitter: https://twitter.com/awesomekling Sponsor me on GitHub: https://github.com/sponsors/awesomekling Support me on Patreon: https://patreon.com/serenityos Donate via Paypal: https://paypal.me/awesomekling SerenityOS is a Unix-like operating system that I'm im

https://youtu.be/i0J6J1Twwyo

Root

Jan 15

OS hacking: Anonymous Files & Window Bitmaps

SerenityOS is open source on GitHub: https://github.com/SerenityOS/serenity Merch: https://teespring.com/stores/serenityos Follow me on Twitter: https://twitter.com/awesomekling Sponsor me on GitHub: https://github.com/sponsors/awesomekling Support me on Patreon: https://patreon.com/serenityos Donate via Paypal: https://paypal.me/awesomekling SerenityOS is a Unix-like operating system that I'm im

https://youtu.be/xV2XOEmD--I

Root

Jan 9

OS hacking: Let's improve system password security

Today we improve password security in SerenityOS with /etc/shadow and increased sandboxing of the "passwd" and "su" programs. SerenityOS is open source on GitHub: https://github.com/SerenityOS/serenity Merch: https://teespring.com/stores/serenityos Follow me on Twitter: https://twitter.com/awesomekling Sponsor me on GitHub: https://github.com/sponsors/awesomekling Support me on Patreon: https://p

https://youtu.be/bmSp0aLTSxg

1

Root

Jan 8

OS hacking: Drag & drop files on FileManager's breadcrumb bar

SerenityOS is open source on GitHub: https://github.com/SerenityOS/serenity Merch: https://teespring.com/stores/serenityos Follow me on Twitter: https://twitter.com/awesomekling Sponsor me on GitHub: https://github.com/sponsors/awesomekling Support me on Patreon: https://patreon.com/serenityos Donate via Paypal: https://paypal.me/awesomekling SerenityOS is a Unix-like operating system that I'm im

https://youtu.be/dc726k_my2c