RISE Security » article

Hacking the Cell Broadband Engine Architecture, SPE Software Exploitation

Ramon de Carvalho Valle — Thu, 11 Jun 2009 00:00:12 +0000

Phrack issue #66 was released and features an article written by Rodrigo, titled “Hacking the Cell Broadband Engine Architecture, SPE software exploitation”, which extends our previously published work to the Synergistic Processor Element (SPE) software development and exploitation. The article is available at:

Hacking the Cell Broadband Engine Architecture, SPE software exploitation
Hacking the Cell Broadband Engine Architecture, SPE software exploitation (Phrack Magazine)

Linux on Power/Cell BE Architecture Buffer Overflow Vulnerabilities

Ramon de Carvalho Valle — Wed, 14 Jan 2009 00:00:36 +0000

The two part article series I wrote, titled “Linux on Power/Cell BE Architecture Buffer Overflow Vulnerabilities”, is available at IBM developerWorks. This article discusses buffer overflow vulnerabilities in Linux running on Power/Cell BE Architecture processor-based servers and how to exploit them. It also presents a complete set of assembly components for Linux on Power/Cell BE Architecture and their usage. Previous knowledge of buffer overflows is required. The article is available at:

Linux on Power/Cell BE Architecture Buffer Overflow Vulnerabilities
LoP/Cell/B.E.: Buffer overflow vulnerabilities, Part 1 (IBM developerWorks)
LoP/Cell/B.E.: Buffer overflow vulnerabilities, Part 2 (IBM developerWorks)

Linux Slab Allocator Buffer Overflow Vulnerabilities

Ramon de Carvalho Valle — Fri, 12 Dec 2008 00:00:26 +0000

I published an article I wrote earlier last year, titled “Linux Slab Allocator Buffer Overflow Vulnerabilities”, written in Portuguese (Brazil). This article discusses buffer overflow vulnerabilities in Linux kernel’s Slab Allocator and how to exploit them. Previous knowledge of buffer overflows is required. The article is available at:

Linux Slab Allocator Buffer Overflow Vulnerabilities
Linux Slab Allocator Buffer Overflow Vulnerabilities (IBM developerWorks Brasil)